Home/ Questions/Q 7875947
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-03T03:05:10+00:00

I’m doing my first steps with ColdBox and I just got stucked. I have

  • 0

I’m doing my first steps with ColdBox and I just got stucked. I have two database tables, users and firms and each user belongs to one firm. After a user logged in to the application, he can list every firm, but can only edit the firm he belongs to.

So how can I manage that the user only has an edit link for his firm? And how should I secure the firm handler and edit action?

I’m working with ColdBox VirtualEntityService and Coldfusion ORM. Should I write a function in the UserService which validates the users permission?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Your edit permissions should be part of the session somehow and your view should contain some logic as to wether a firm is “editable” and display the edit link. Of course your controller will need to double check the user permissions when someone actually uses the edit link to make sure they do indeed have the permissions they need.

    This seems like a sort of “standard logic” question and has not so much to do with Coldbox. I’m not a CB expert but I don’t think there’s something specifically native to CB that handles your case. This is simply about writing good controller and validation code and figuring out what to store in your users session.

    • 0