DenisRechkunov/blinker — Issue #10: Controller must accept all model bind request.
Author: DenisRechkunov
Created: 2012-01-24 11:06:40+00:00
State: open

Now binding engine have not any authorization engine. Any user can bind to public property of any model. New binding engine must send bind request to controller which have access to session object of user for specified token and check if user can get access to model property then allow to bind.