Hi James, On 18. Apr 2006 - 06:55:12, James Carman wrote: | That's how I do it. I store the user-id in the session inside one of my | ASOs. Then, I have a threaded service called SecurityContext which actually | will lazily load the actual user object during the request cycle if it's | asked for by someone (like a security interceptor or something).
in only this four lines you mention two things I'm highly interested in: The SecurityContext and the SecurtyInterceptor. As I wrote in one of my former posts I'm in search of a security concept for my application and those two things at least sound as if they are what I also thought of ;) Would you mind to provide further information about how you implemented them or even some example/the code? Kind regards, Andreas --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]