I want to prepare a swing application. I am designing a role based access control model in mvc design.
When a view wants to request something from a controller, how can this request be realized in object oriented manner. That is, while requesting how can session information of user be sent to the model or controller?
For example, a model method can be like that
createCustomeraccount(EntityCustomer obj, Session user)
so all methods in model classes should have session object parameter which has role information of user and also role and rights should be store in a class to check user right. Therefore every model has a roleright object which includes role and right mapping.
Is this correct design?