mwilkie/thinkup — comment on commit 472c8ada29728113e3dc280c083dce264e8d2b60
File:  line 0
By ginatrapani:

This is interesting... so basically we're giving AuthControllers the opportunity to bypass auth under certain circumstances by overriding the preAuth function. At first I found it kind of icky--what's the point of making it an auth controller at all if you're just going to bypass auth?--but we obviously have a use case with GridController, which is auth all the time except one circumstance. So, I'll take it. Thanks.