Security Interceptor - Enabling preEventSecurity setting causes userValidator to be run twice in validation object

I have the security interceptor setup and just noticed that with the preEventSecurity setting enabled the userValidator method in my validation object is run twice. As soon as I disable it, then it is only run once.

Is this a bug, on purpose, or something I did wrong?

ON purpose.

The security interceptor normally executes at preProcess only. However, there are cases you might want to enable the preEvent wher eit will fire before ANY runnable event even if executed internally. A totally specific use case. I would suggest that 98% of the time this should be OFF unless you need so much tight security.

Luis F. Majano
Ortus Solutions, Corp

ColdBox Platform:
Linked In:
IECFUG Manager:

Cool. Thanks for clearing it up!