sorry, another "LDAP vs RDBMS" question!

[Phillip Rhodes <phillip@rhoderunner.com>]

I am building a ecommerce site that will integrate the products of 20+ 
companies into one single on-line order catalog.  (Yeah, one of those 
ecommerce pipe dreams for now)  Because each individual company has 
permission to update its products, view orders for its products, link 
products to categories,  the application has heavy duty access control 
requirements.  I want to put the whole system into a ldap directory.  This 
would include orders, customers, products, categories, etc.  BUT, I keep 
reading the people make the mistake of putting too much in ldap directory. 
 But I am enamoured with the beauty of this solution.  I am looking for 
someone to talk me into/out of it!

Thanks for you time,
Phillip

Some access control requirements
Customer can view their orders
suppliers can view/update all their products in catalog
suppliers can view all of their products ordered by customers
Employees can view/update all orders in system