AssetService Security hole

[Tina Tsui <tt...@bellsouth.net>]

Hello all,

I've read Mr. Ship's comments in the AssetService class where the 
AssetService can be used to extract class files out the of server.  I 
was going to implement my own AssetService class that only allowed 
access to limited directories, but I thought I would check with the rest 
of you and see if there's a better approach before I start re-inventing 
the wheel.  

Thanks in advance,
Tina