I am trying to learn to do some new stuff and it occured to me that I have no idea how to go about using Ajax with webservices when there is some kind of web security in use. A user has to log into my app, an object get created and stored in a session.
If I have a user doing something on the site that calls a webservice how can I make sure to keep the security in tacked when that happens? Say the user is changing a description on something, that new description gets sent to the service but the service needs to check and make sure that A: the user is logged in. B: this user has the ability to change.... etc etc. Minaly how can I access my session object and make sure that all this stuff is in place before any changes are made?
What is the best approach to this?
...
Go to the complete details ...