create table TObject
(
  OID      int identity( 1 ,  1 ) not null,
  Name     String,
  Ext      String,
  Class    String,
  Deleted  bit default  0 ,
  primary key clustered ( OID ) 
)

create index IX_ClassExt on TObject ( Class, Ext )
end
go

exec DropView 'VObject'
go
create view VObject
with view_metadata
as
  select OID, Ext, Name, Class
    from TObject
    where Deleted =  0 
go

exec Class 'Menu', 'Object', 'Меню',  0 
  exec Field 'User', 'AUser', 'Пользователь', 'null'
  exec Field 'Action', 'String', 'Действие', 'null'
  exec Field 'Object', 'Object', 'Объект', 'null'
exec Compile

create table TMenu
(
  OID       int,
  UserOID   int,
  ActionOID int,
  ObjectOID int,
  primary key clustered ( OID )
)

create view VMenu
with view_metadata
as
  select o.*,
         m.UserOID,
         UserName = u.Name,
         UserClass = u.Class,
         m.ActionOID,
         ActionName = a.Name,
         ActionClass = a.Class,
         m.ObjectOID,
         ObjectName = ob.Name,
         ObjectClass = ob.Class
    from TMenu m
           join
         VObject o
           on o.OID = m.OID
           left join
         TObject u
           on u.OID = m.UserOID
           left join
         TObject a
           on a.OID = m.ActionOID
           left join
         TObject ob
           on ob.OID = m.ObjectOID
go

Step softly, but carry a big gun

I started in 1983, in 2007 i still on a case!

exec Class 'AUser', 'Object', 'Абстрактный пользователь',  0 
  exec SubTable 'Roles', 'Роли', 'NoTable NoView'
    exec Field 'Role', 'Role', 'Роль', 'Key'
    exec Field 'Level', 'Integer', '', 'InVisible'
    exec Method 'Select', 'AUser_Roles_Select'
    exec Method 'Insert', 'AUser_Roles_Insert'
    exec Method 'Delete', 'AUser_Roles_Delete'
  exec Action 'Roles', 'TfrmAUserRoles', 'Обладает ролями'
    exec Page '', '', 'Edit'
      exec Control 'Name'
      exec Control 'Ext', 'Системное имя'
    exec Page 'Roles', 'Roles', 'Grid'
  exec Folder 'Users&Roles', 'Root', 'Пользователи и роли'
exec Compile
go

exec DropProc 'AUser_Roles_Select'
go
create procedure AUser_Roles_Select
  @OID OID
as
  set nocount on
  select OID = t.ChildOID,
         RoleOID = r.OID,
         RoleName = max(r.Name),
         RoleClass = max(r.Class),
         Level = max(t.Level)
    from TTreePath t
           join
         VRole r
           on r.OID = t.ParentOID
    where t.ChildOID = @OID
      and t.Level >  0 
    group by t.ChildOID, r.OID
go

exec DropProc 'AUser_Roles_Insert'
go
create procedure AUser_Roles_Insert
  @OID     OID,
  @RoleOID OID
as
  set nocount on
  exec Object_AddLink @OID, @RoleOID
go

exec DropProc 'AUser_Roles_Delete'
go
create procedure AUser_Roles_Delete
  @OID     OID,
  @RoleOID OID
as
  set nocount on
  exec Object_RemoveLink @OID, @RoleOID
go