exact requirement is still not clear, it is still in discussion phase and i need to present various possibilities to client. while doing my search i found AuthSheild is good option as no changes at client work station not sure about other option you mentioned now.
i am more comfortable at database layer than this GUI layer so i may not expressed it properly earlier
thanks
Samrat