It's not a big deal to have a separate access manager for each web page. You don't have any measurements to show it to be a problem, so in a true Don Quixote fashion, you're fighting windmills and imaginary enemies :)
The createRequest
virtual method is called by the various non-virtual request methods: get
, post
and put
. It's a good example of the non virtual interface (NVI) pattern.