2 Replies Latest reply on Sep 13, 2006 1:11 PM by Gavin King

    security question

    dudududu Novice

      i've a page for user profile editing

      my User has a currentMoneyAmount property.
      in my JSF I show User.currentMoneyAmount as output text

      this is a edit screen , I am outjecting the properties to some SB and do em.merge(editedUser)

      can hacker or anyone else who knows seam make my page outject other properties as well like currentMoneyAmount?