But you don't have to define a Locator for EntityProxy too, it's optional. Sorry, I still don't quite understand the difference between ValueProxy and EntityProxy with regard to security. But I do see an issue with a client accessing all services from any request factory instance regardless of the auth-constraints on the servlet.
-- You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
