hi carsten
just to clarify, the ResourceProviderDecorator is not a proposal for security - it's a proposal for extensibility.
i tend to disagree. as lars already explained in this thread before you can't have extensibility when it comes to access control and permissions without messing with the internal mechanism. imo claiming that this has nothing to do with security is not correct and misleading. kind regards angela