Why there is no ExecuteObject/ExecuteCommand per type authorization rule/action? I can see that AddObjectAuthorizationRules() is being call...
Thanks
Ivan
UPDATE: ok, after looking through csla source, I figured out that EditObject permission is being checked while executing DataPortal_Execute method.
Copyright (c) Marimer LLC