Hi,

I want to add some security to my application by checking whether the currently logged in user (stored in an ApplicationState) has access to the object that is handed to his current page via onActivate(). Since tapestry handles the database fetching of entities to an onActivate method I would need to check within each onActivate method on every page if the user is allowed to use the entity passed. Is the some kind of interception mechanism that I could inject that could do this checking once for every page? So maybe that I provide a service that gets an entity class and ID and returns the actual entity instance only after doing some permission checks?

Thanks

Moritz

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to