since admin privileges are run-time features, deferred binding can't help 
you in this case, unless you duplicate your project adding some extended 
admin-only functionalities to redirect admin to, and this solution would be 
just as bad, as if you implement security facility in an abstraction of GWT 
<-> [your custom servlets] interactions, avoiding usage of standard 
application server security means. The reason is that if you look a little 
bit closer at your issue, the problem is hidden not in rendering buttons, 
which might be added manually by a user via DOM-inspector, but in the 
server code and URL processing, which should filtrate the incoming requests 
to limit unprivileged users from abuse attempts.

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/google-web-toolkit/-/4xPotTKQ91gJ.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.

Reply via email to