no what I am trying to decide is if the current user (should probably also be a parameter) is allowed to perform the action 'drug' on a certain patient while being on a certain department.
And it should be something I can *ask* about at any place in the code; not something necessarily only at interceptor level. JAAS has the mechanism for *asking* such questions (Permission and securitymanager if i remember correctly) and with jee 5 it seems like JAAS configuration has been standardized meaning you should be able to install your own logicchekker - keeping the implementation details out of the code; but the question is asked via standard API. ps. jee 5 might have made it theoretically available but im not sure if it is in practice in the various containers. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3941389#3941389 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3941389 ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ JBoss-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jboss-user
