remove Session#getAuthorizationStrategy?

2007-09-15 Thread Eelco Hillenius
Hey, Do we have a very good reason for having getAuthorizationStrategy in Session? By default, this just does getApplication().getSecuritySettings().getAuthorizationStrategy(); I'm revising the chapter on authorization currently, and it just looks yacni to me. In the probably rare case that you

Re: remove Session#getAuthorizationStrategy?

2007-09-15 Thread Matej Knopp
Dunno. What's wrong with having possibility for authentication strategy per session? I don't like API bloat, but I can imagine a good usecase for this. -Matej On 9/16/07, Eelco Hillenius [EMAIL PROTECTED] wrote: Hey, Do we have a very good reason for having getAuthorizationStrategy in