Authority to Instances
GetCurrentInstance and GetSelectedInstance will return the next instance (regardless of whether or not the current user is authorized to the instance in the current command context). Preventing access to the instance at this level is an application issue, which can may be handled in at least two different ways:
- Modify the filter to invoke #Com_Owner.avCheckInstanceAuth and based on the returned values for the instance, decide whether to add the instance to the instance list.
- Modify the command handler to invoke #Com_Owner.avCheckInstanceAuth and based on the returned values for the instance and the command, decide whether some or all fields on the command handler should become invisible or read-only for the current user.