[jboss-user] [Security & JAAS/JBoss] - Can we stop access to JBoss internal classes through classlo

[krishc]

Hi,

Does JBoss server have any feature through which application code "will not" get access to JBoss system/server classes (any security sensitive classes) ? As I understand, any application user can walk their way to JBoss internal classes through classloading heirarchy or use reflection to achieve the same ?

Thanks,
Krish 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3981925#3981925

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3981925