As for (1.), multiple groups might have access to multiple groups of ports.
This, I think, adds some complexity to your model, ie. not just 1-1,
1-many, or many-1, but many-many as well.
------------------------------------------------------------------------
Marc Elbirt Computer Pages Inc.
Systems Administrator 253 Sheppard Ave. West
marc@cpol.com Toronto, Canada M2N 1N2
WWW - http://www.cpol.com Ph: +1 416 225 3030 Fax: +1 416 225 6737