Best Practise: Protecting against unallowed save()

I'm working about 2 month with Cake, but its my first bigger app.
I want to write my own security function which would check before each
save() if the save model is associated to the logged in user, what
would be the best way to do that?

My Ideas till now:
a beforeSave() function in Appmodel:
+ DRY
+ relative secure
- if I use more than one save() its inefficient (I have up till 8 on
one page)
- I don't have a clue how I can check newly created ones with no id

a beforeSave(9 in each Modell:
- even more crappy than above

a validation-function in the controller
- not DRY
- more code
+ could work with allready readed data

I believe that there must be more peaple out there with the same
problem, are there any finished solutions?

Any Ideas or thoughts are welcome!

thx
Aurelius
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---