No, you should only call Latch after you've done your authorization checks. If a username and password is incorrect, you know its access is denied without the need of calling Latch. Only when you have done all your checks and you were about to let the users do whatever they were trying to do, at that last moment is when you call Latch to check if the operation is permitted at this moment in time.
Have more questions? Submit a request