Hi, I am creating a web application using Tapestry for the GSoC. I was wondering what is best way to fit security requirements of a mere application (login/password/roles).
How to keep and pass the user data from page to page ? Should I use Tapestry mechanism to check access rights ? Like OnActivate for each page ? use @SessionState ? Or should I use Javascript and cookies ? Note: I do not want to use Acegi. I'd like to have your opinion. Thank you, Thibaut