I have the security interceptor setup and just noticed that with the preEventSecurity setting enabled the userValidator method in my validation object is run twice. As soon as I disable it, then it is only run once.
Is this a bug, on purpose, or something I did wrong?
ON purpose.
The security interceptor normally executes at preProcess only. However, there are cases you might want to enable the preEvent wher eit will fire before ANY runnable event even if executed internally. A totally specific use case. I would suggest that 98% of the time this should be OFF unless you need so much tight security.
Luis F. Majano
President
Ortus Solutions, Corp
ColdBox Platform: http://www.coldbox.org
Linked In: http://www.linkedin.com/pub/3/731/483
Blog: http://www.luismajano.com
IECFUG Manager: http://www.iecfug.com
Cool. Thanks for clearing it up!