I am using an AIR 3.0 to create my client that connects to my server LCDS application that uses oracle XE database. I now need to implement the user authentication & access controls to GUI screens. Any pointers that show best practices in this regard or get me started...
You can use the mechanisms built into the AMF protocol, or manage the session manually by passing around an authentication token generated on the server.
Here is some basic info on AMF sessions: http://livedocs.adobe.com/blazeds/1/blazeds_devguide/help.html?content=services_security_5 .html
It's written for BlazeDS, but the principal is the same.