Re: [Catalyst] Where to add access control? Override execute() or dispatch()?

2009-09-02 Thread Tomas Doran
On 30 Aug 2009, at 21:17, Bill Moseley wrote: I'm trying to decide if this is the best approach, or if would be better to test the ACL before dispatching. The issue is if the request is for /foo/bar, and an ACL rule blocks that, should Foo::(begin|end|auto) still run? Or should it act as if th

[Catalyst] Where to add access control? Override execute() or dispatch()?

2009-09-02 Thread Bill Moseley
I'm in the process of adding custom access control for actions. I've been looking over C::P::Authorization::ACL. It overrides execute() which is run for every method called by the dispatcher, which includes begin, auto, the action itself, and end. Depending on how the ACLs are specified, the plu