[Solar-talk] Auth process in closed apps

[Paul M Jones]

On Aug 9, 2006, at 8:02 PM, Rodrigo Moraes wrote:

> Simple question about best practices: in an app where people must be
> authenticated to perform or see anything (a classic "admin area", to
> be clear), is it correct to put the authenticathion process in
> _preAction(), e.g., if($auth == false) { $this->_action = 'login'; } ?
> And _preAction() is a nice place to perform general permissions
> checkings too?

That is generally what I do.



--

Paul M. Jones  <http://paul-m-jones.com>

Solar: Simple Object Library and Application Repository
for PHP5.   <http://solarphp.com>

Savant: The simple, elegant, and powerful solution for
templates in PHP.   <http://phpsavant.com>