It sounds like you need to study more the Access Control chapter of the book.
You don't necessarily need to create a new controller, but whether you choose to do so or not is due to your own requirements. Once you have studied the built-in authorisation system in a little more depth, all should become clearer to you. Regards, D On Feb 10, 6:12 am, pbreit <[email protected]> wrote: > Forget the needing to lock down. I see what I have to do. > > But I'm still wondering if anyone has good practices on item creation and > modification. It looks like I'll probably need to create a separate > controller for editing?
