Skip to content

Conversation

@emenychtas
Copy link

Any request validator should only be called after authorization.

Validators can impose load to the database and should be protected.

Any request validator should only be called after authorization. Validators can impose load to the database and should be protected.
@deceptiveSimplicity
Copy link
Contributor

To me it looks like you moved Authorization after Validation.

@juanmarquezruiz
Copy link

AuthorizationBehaviour should be before validation, because there is no point in validating if the user is not authorized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants