Mike discussed the following security model for Windows SharePoint Services:
Web Application -maps-to- IIS Application Pool
|
-contains-
|
Site Collections (first major security boundary: users, groups, permissions ...)
|
-contains-
|
Sites (inherit security settings from collection)
Here is the whiteboard:
