Programatic Vs Declarative Security

[Joe San]

What is the advantage and disadvantage of using Programatic security over declarative security?? Whish is the professional way of doing it?? Is it a good practice to use declarative security or programatic security??

[Tom Henricksen]

Do you have HFSJ? If so Chapter 12 talks a lot about this. The basic idea of declarative security is changing without recompilation. If you make security part of say your servlet then you need to change code every time security changes. This is a dependency you can avoid with decalrarative security. Also depending on where you deploy (dev vs prod) you may want different security.

Tom

[Marcus Green]

Programmatic security can be dynamic, i.e. you can change access "on the fly". I have writtena little about it at

http://www.examulator.com/moodle/mod/resource/view.php?id=435

[Joe San]

Thanks Marcus!