It sounds like you have a pretty good handle on things. One possible variation would be to add your users to user groups; in this scenario you would only need to manage the group's ACL.
The ckbx_Template.AclID column maps a template to an ACL. I'm not sure what information you are using to identify your ResponseTemplate but if it is something other than the ID, ckbx_Template and ckbx_ResponseTemplate are related on the TemplateID and ResponseTemplateID columns.
|