Hi,

I am trying to write some row level security implementation using a mix of Filters, Criteria and Events. The job cannot be done by any one layer due performance issues (Filters: subquery problem; Criteria: avoiding too many joins; Events: only for simple checks).

For the last layer, Events, I have tried 'pre-load', 'post-load' and 'load' but I am not sure how to VETO the event if I find that the object being loaded is not required. I know I can throw an exception but that, I believe, would stop the whole load process for something like a search query.

My simple goal - when user searches something, some of the records should be filtered out using a mix of all above three mechanisms.

Thanks in advance.