OK I have been reading tutorial after tutorial looking for a way to have my application be login controlled. Does Flex have any access control mechanisms that are native? So far I think the correct way to do this is use the auto generated php to get the user from the MySQL DB compare the password entered to the one in the database. If it is correct then set a variable to the users role(defined in database) and have different states for each role.
Is there a better way to go about this?
I think I can do the code but I just was curious if there is a better way to achieve this.
That's about the jist of it. Call a remote method to check credentials, then send some token back to the client to send with any calls requiring a valid user. The token should be checked for validity before serving any results.
If you are using a RemoteObject, you may also want to look into the build in setCredentials method for passing authentication info with a each request.