On 10/8/07, Robert Rawlins - Think Blue <[EMAIL PROTECTED]> wrote: > > Thanks Matt, > > I generally agree with you that it works best when not interrupting the > application flow, i.e logging, however, It seems that everyone is quite > happy to utilize AOP to implement security concerns, and obviously > validating and confirming security credentials or authenticating a user is > really no different to validating a piece of data, either can return true > or > false and need to be acted upon accordingly, or are they referring to > something different when they discuss 'security'?
In general, a Security Advice would throw an exception if the authentication fails. It would then be up to the client code to handle the exception. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion is delivering applications solutions at at top companies around the world in government. Find out how and where now http://www.adobe.com/cfusion/showcase/index.cfm?event=finder&productID=1522&loc=en_us Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:290558 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

