Adam, Thank you for pointing that out! That was the detail I was missing. Now I understand what David was saying.
Wow. We really painted ourselves into a corner with that one. We should change that - regardless of the security refactor. -Adrian --- On Fri, 5/15/09, Adam Heath <doo...@brainfood.com> wrote: > From: Adam Heath <doo...@brainfood.com> > Subject: Re: Brainstorming: Security Requirements/Scenarios > To: dev@ofbiz.apache.org > Date: Friday, May 15, 2009, 1:26 PM > David E Jones wrote: > > > > I don't think there is a reason why we can't. > > > > Why do a decorator object instead of just changing the > GenericDelegator? > > In order for this to do anything we'll have to change > EVERY call to a > > decorator method anyway... > > Code shouldn't be using GenericDelegator. It should > be using > DelegatorInterface. Then this problem wouldn't be an > issue. >