<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="http://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Profiles in domain.xml
</h3>
<span style="margin-bottom: 10px;">
reply from <a href="http://community.jboss.org/people/david.lloyd%40jboss.com">David Lloyd</a> in <i>Management Development</i> - <a href="http://community.jboss.org/message/545949#545949">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><blockquote class="jive-quote"><p>Scott Stark wrote:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>We need the ability to lock down the features and configuration on a server. That is not to say that there is a need to support the implied capabilities given a set of applications. However, that would require some processing of the deployment in order to determine what capabilities were in use, including resources. So, if there is an abstraction like:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p><applications></p><p>   <web-app name="my-store" context-root="/the-best-store" ...></p><p>   </web-app></p><p></applications></p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>how much work has to be done to adequately identify the required capabilities? We can define the default capabilities implied by the various application types, but ultimately the user should be able to trim that down if they are not using certain features.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>I still think the best comprimise would be to have profile definitions in the domain in terms of the required capabilities potentially simplified by having implied capabilities associated with each application type that could be overriden by the admin.</p></blockquote><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>OK so what I'm getting from this is a new requirement:</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><blockquote class="jive-quote"><p>"It shall be possible within domain.xml to specify what capabilities/subsystems are allowed (whitelist) or disallowed (blacklist) in order to ensure that undesired subsystems are not inadvertently started causing unexpected performance penalties."</p></blockquote><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>If we make this optional we get the best of both possible worlds.  On the one hand, only minimal configuration is required (the default would be an empty blacklist).  On the other hand, administrators can ban only certain subsystems, or lock it down tight if they want.</p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="http://community.jboss.org/message/545949#545949">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in Management Development at <a href="http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2107">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>