Hi

Users need specific authorisation to update specific properties for given objects in our model.

Now, I can (and will) hook the UI to enable/disable columns, text boxes etc. but I would also like to enforce the rules at the object level.

Now, I know I can use an interceptor to check what properties have changed when an object is saved or the session is flushed.

My question is, is there there some way to detect as a property is changed. I would imagine if this where possible, it would need a proxied object and the hooking of the setter?

If so, can someone tell me how to ensure that I get only proxied objects as the result of a query?

I.e. session.CreateQuery("from Object").List() returns a collection of proxied objects

Many thanks,
Mark.

If you use a mapping strategy of field rather than property, you can put these authorization checks directly in the property setters, since then NHibernate will never read or write to the property. It's not really an NHibernate issue.