I've noticed that _queryAssociation method, within DboSource class, calls linked models afterFind callback, but does not calls linked models behavior callbacks. IMHO, it can be potential risk when you protect some model with AclBehavior. Because, Model->find() method returns associated model data disregarding permissions of the last.
-- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php
