Your security manager isn't applying the roles, the code calling the
security manager is.  That is, this line:

<cfif SecurityController.HasAccess(User, "publications")>....</cfif>

is applying the roles to the application, not the hasAccess method of
the security manager.  That line ought to read:

<cfif user.hasRole("publications")>...</cfif>

It's still the CFIF applying the information, just it's getting the
required info in a much more direct and easy to read fashion.

cheers,
barneyb

On 7/18/05, Ben Nadel <[EMAIL PROTECTED]> wrote:
> I was thinking about going directly to the User and skipping the
> SecurityController, but then I felt that the user should know about how its
> access is applied. Meaning that, while a user might know its own roles, only
> the Security system itself should understand how the roles are applied to
> the application.
> 
> That just made more sense in my mind.
> 
> Thanks,
> Ben
> 

-- 
Barney Boisvert
[EMAIL PROTECTED]
360.319.6145
http://www.barneyb.com/

Got Gmail? I have 50 invites.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:212146
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to