One of the business rules is to log which staff does which operation, and the current code passes the whole session facade into the Service (model layer).
Does it sound/smell right? Shouldn't the Controller deals with the Session Facade and extract the data and pass them to the Service instead?
Isn't the primary reason for session facade is for... easy testing of the controller layer? Does passing the whole session facade into the model make sense?
Thx