Yeah. It should be in the block layer. In AF, Block layer is acting as the Controller in the MVC architecture. All the Ajax/REST requests will first come to the block layer. In there, we should check whether the user is allowed to do the operation or not, before we proceed any further.
On Fri, Aug 28, 2015 at 7:46 AM, Manisha Gayathri <[email protected]> wrote: > Yes. > Block layer is like the API for the AF internals. So the permission > checks should happen in the block layer. > > > > On Thu, Aug 27, 2015 at 8:21 PM, Danushka Fernando <[email protected]> > wrote: > >> I think this is about a guideline to followed by AF team. IIRC sometime >> back we discussed the same matter and we decided to do it in block layer. >> >> Thanks & Regards >> Danushka Fernando >> Senior Software Engineer >> WSO2 inc. http://wso2.com/ >> Mobile : +94716332729 >> >> On Thu, Aug 27, 2015 at 7:07 PM, Mahesh Chinthaka <[email protected]> >> wrote: >> >>> >>> Hi , >>> >>> In appfactory appmgt jaggery app we check permissions like whether a >>> particular user is allowed to read resources of a particular stage / update >>> resources in a particular stage etc. >>> >>> What is the most suitable place to check these kind of permissions. In >>> block layer or module layer ? >>> >>> >>> -- >>> *Mahesh Chinthaka Vidanagama* | Software Engineer >>> WSO2, Inc | lean. enterprise. middleware. >>> #20, Palm Grove, Colombo 03, Sri Lanka >>> Mobile: +94 71 63 63 083 | Work: +94 112 145 345 >>> Email: [email protected] | Web: www.wso2.com >>> >>> _______________________________________________ >>> Dev mailing list >>> [email protected] >>> http://wso2.org/cgi-bin/mailman/listinfo/dev >>> >>> >> >> _______________________________________________ >> Dev mailing list >> [email protected] >> http://wso2.org/cgi-bin/mailman/listinfo/dev >> >> > > > -- > ~Regards > *Manisha Eleperuma* > Senior Software Engineer > WSO2, Inc.: http://wso2.com > lean.enterprise.middleware > > *blog: http://manisha-eleperuma.blogspot.com/ > <http://manisha-eleperuma.blogspot.com/>* > *mobile: +94 71 8279777 <%2B94%2071%208279777>* > > > _______________________________________________ > Dev mailing list > [email protected] > http://wso2.org/cgi-bin/mailman/listinfo/dev > > -- Best Regards Samith Dassanayake Software Engineer | Cloud TG WSO2, Inc. | http://wso2.com lean. enterprise. middleware Mobile : +947 76207351
_______________________________________________ Dev mailing list [email protected] http://wso2.org/cgi-bin/mailman/listinfo/dev
