Hi
Sorry, I can’t help you. Your question is really cryptic, can you please rephrase it a bit so we can understand what your question is?
With $r.commandURI("sas”) you create an event URL that can be dispatched in your java controller. The event is sent from the VelocityContainer where you have this command in the html markup. Note that this should be used carefully. There are only rare situations where this is really needed. If you build your own links like this make sure you also set the client to the busy state to not loose client clicks.
Normally you should rather use the Link component instead of building your own links with the velocity commandURI. When you use links components, the security check is done when creating the links component, so it will be impossible to trigger a command without the appropriate rights (because there is no component at runtime that will dispatch that command). By using the velocity commandURI you have to take care about this yourself and check for security at dispatching time.
Best advice is to fire up your debugger and step though the code to learn how everyhing works...
Cheers
Florian