[esb-issues] [JBoss JIRA] Commented: (JBESB-1971) ESB service is automatically exposed via EBWS
[
https://jira.jboss.org/jira/browse/JBESB-1971?page=com.atlassian.jira.plu...
]
Kevin Conner commented on JBESB-1971:
-------------------------------------
Declaring the schemas will expose the service through a WS endpoint as that is the
intention.
This is not a security risk, as it is behaving as documented, and cannot violate backward
compatibility as this functionality did not previously exist.
ESB service is automatically exposed via EBWS
---------------------------------------------
Key: JBESB-1971
URL: https://jira.jboss.org/jira/browse/JBESB-1971
Project: JBoss ESB
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Rosetta, Web Services
Affects Versions: 4.4 CP1
Reporter: Jiri Pechanec
Assignee: Jim Ma
Priority: Critical
Attachments: JBESB-1971.patch
When the attribute webservice is omitted the ESB service is automatically exposed as
EBWS. This
1) Is security risk
2) Violates backward compatibility
The services should not be exposed automatically or there should be global switch that
enables/disable automatic exposure and disabled by default.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira