Re: How to implement admin features/sections in app
since admin privileges are run-time features, deferred binding can't help you in this case, unless you duplicate your project adding some extended admin-only functionalities to redirect admin to, and this solution would be just as bad, as if you implement security facility in an abstraction of GWT <-> [your custom servlets] interactions, avoiding usage of standard application server security means. The reason is that if you look a little bit closer at your issue, the problem is hidden not in rendering buttons, which might be added manually by a user via DOM-inspector, but in the server code and URL processing, which should filtrate the incoming requests to limit unprivileged users from abuse attempts. --
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To view this discussion on the web visit https://groups.google.com/d/msg/google-web-toolkit/-/4xPotTKQ91gJ.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to google-web-toolkit+unsubscribe@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
0 Comments:
Post a Comment
Subscribe to Post Comments [Atom]
<< Home