...
[15:11:20 CDT(-0500)] <EricDalquist> yeah
[15:31:05 CDT(-0500)] <jwennmacher> EricDalquist: As a comparison between the two approach es I started to look into where the permission checks are in the areas you mentioned ... portlet definition, entity, and window registry. By entity do you mean PortletEntityRegistryImpl? For window registry I identified PortletWindowRegistryImpl. I'm not sure where the impact is with portlet definition. I'm assuming you mean whether the user has permissions to view
[15:31:21 CDT(-0500)] <EricDalquist> correct
[15:31:39 CDT(-0500)] <jwennmacher> So it's these two classes or is there a third?
[15:31:57 CDT(-0500)] <EricDalquist> there should be a PortletDefinitionRegistryImpl as well
[15:34:56 CDT(-0500)] <jwennmacher> Not sure how I see the user playing in that
[15:35:02 CDT(-0500)] <jwennmacher> in that class
[15:36:05 CDT(-0500)] <EricDalquist> hrm
[15:36:08 CDT(-0500)] <EricDalquist> must not be in there
[15:36:15 CDT(-0500)] <EricDalquist> like I said I can't remember all of it ...
[15:36:42 CDT(-0500)] <EricDalquist> but somewhere in that whole registry side I believe the "can a user view the portlet" permission checking is happening
[15:36:54 CDT(-0500)] <jwennmacher> ok
[15:38:28 CDT(-0500)] <jwennmacher> thanks. I think I have a very high level understanding, but there's a lot of code in that sequence I don't have a full understanding of at this point.
[15:38:43 CDT(-0500)] <EricDalquist> yeah
[15:38:49 CDT(-0500)] <jwennmacher> making my head spin ... 
[15:38:58 CDT(-0500)] <EricDalquist> there is A LOT of complexity in there
[15:39:07 CDT(-0500)] <EricDalquist> just because so much work gets done incrimentally
[15:39:17 CDT(-0500)] <EricDalquist> so what shouldn't in theory be tyhat complex of a system
[15:39:26 CDT(-0500)] <EricDalquist> ends up being very complex due to legacy API overhead