Develop a Role Based Access Control Module for a Web app

Role Based Access Control for access to Functionality in the Web Application and also for activity within each functionality. For example Who has access to the Purchase Order Module - Who can Create a Purchase Order - Who can View a Purchase order