On Thu, Mar 27, 2008 at 9:42 PM, Grzesiek <[EMAIL PROTECTED]> wrote: > My question is: is this correct approach? Maybe I should authorize > against model? If yes - how would you do it ?
Nothing wrong with your code -- you're correctly saying "if the authorized user's id matches the id we want to edit, then go ahead and let them edit it". Nice and simple. -- Chris Hartjes Internet Loudmouth Motto for 2008: "Moving from herding elephants to handling snakes..." @TheKeyBoard: http://www.littlehart.net/atthekeyboard --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
