We are building a customer portal application to allow access to specific data record pages for a client. We also need managers to access groups of client records. I'm having trouble seeing a way to do this with the built in authentication. We can do either of these, but not both. The only way we see to accomplish this would be to create a separate table with client users, create a new login form, and embed their ID in each data record to query on login. Does anyone have a suggestion of another approach using the SS authentication? We're new to SilverStripe, so I thought maybe there was another way.

Thanks.