I have a business database where some users (role Manager) have access to multiple and different "sites" (there are numerous combinations, so having a different role for each is out of purpose - managed sites evolve during time).
I need to provide row level security where each Manager has only access to his sites data.
From what I read for now, domain seems the way to go but on every sample I found (as this one), user profile attributes are "hardly set" in the database/user profile attribute configuration.
Is there a way to dynamically get sites from the business database? Shall we synchronize business database with user profile attributes?
I didn't find any clue in the Authentication cookbook.
What's the best practice on this?
Finally, it is not very clear for me, is Domain only a commercial feature?