IMO we should have dedicated SM enabled test runs. We used
to have it regularly but it fell out of preference. :)
On 02/28/2013 09:52 AM, David M. Lloyd wrote:
The AS codebase now supports running under a security manager.
Well,
sort of. There are a few places where we need privileged blocks and/or
permission checks, but you can boot up AS under a security manager today
if you want. Just follow these steps:
1. Modify standalone.sh so that the -secmgr flag is passed in to JBoss
Modules.
Well, I guess there's just the one step. Anyway I've noticed that the
impact on startup time is not as bad as I had expected, which is good.
So the question is: Should we set up a security manager-enabled test
run? How should it work?