> The other possibility (maybe better one) could be to let the auth-block > and rendering block stand alone and then let the service blocks depend on > them.
This has still the 'disadvantage' of users beeing able to call blocks directly. Grzegorz: I recognized the updated SSF-documentation with new image about DispatcherServlet[1] (nice!). There it is pointed out, that ONLY DispatcherServlet (wich acts as the mainControllerBlock) sould delegate requests. My mentioned 'disadvantage' is still true. What am I missing in this 'simple' design? Or am I just adding useless complexity due to my thoughts about authentication? Best greetings, Patrick [1] http://cocoon.apache.org/subprojects/servlet-service/1.0/servlet-service-impl/1.0/1412_1_1.html -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]