October 2008 - jboss-dev-forums - Jboss List Archives

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by anil.saldhana＠jboss.com

"david.lloyd(a)jboss.com" wrote : I guess the simplest way to solve the problem is to have bogus URL handlers defined on the boot classpath for all the URL schemes we want, and then once the container is booted far enough, it can install a URLStreamHandlerFactory that loads the "correct" handler factories from then on. This will work around the check that the URL constructor does. Behavior consistent across all JVM implementations? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181100#4181100 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181100

16 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by david.lloyd＠jboss.com

A quick mockup test shows this is at least feasible. Throughout the entire verification process the URLStreamHandler.connect() method is never called so it doesn't have to be a "real" handler in order for security checks to work. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181092#4181092 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181092

16 years, 3 months

1
0
0 / 0

[Design of JBoss jBPM] - Re: meeting context

by thomas.diesler＠jboss.com

Yes, a good result of the meeting would be a set of API interfaces/classes that everybody can agree on plus a set of CTS test cases that exercises the API. The 1-Jan-2009 jBPM4 release should then provide an implementation of that agreed API. In Jan we meet again and set the scope for 1-Mar and so on ... If we can stay focused on correctness and ease of use of the API it will be possible to move quickly and enlarge the scope of functionality for given release cycles. This will hopefully rather sooner than later lead to a jBPM4 release that can replace the current jBPM3 product. The replacement criteria (and I say it again) is a product that passes the CTS through the API. The functional scope of that product must be at least that of jBPM3. Key to good progress is to stay focused on what can actually get achieved in a given release cycle plus delivery on an unconditional basis. A good indicator of this "we will deliver as promised" principal, is the upcoming jBPM-3.3.0.GA release. The team succeeds if promised functionality is unconditionally available by a certain date, sufficiently documented and properly integrated in automated QA. You can monitor progress on the JIRA road map panel https://jira.jboss.org/jira/browse/JBPM?report=com.atlassian.jira.plugin.... ... the remaining work load per individual with this report ... https://jira.jboss.org/jira/secure/ConfigureReport.jspa?filterid=12311991... ... and recent changes to the project here ... http://jbpm.dyndns.org:8280/hudson/job/jBPM3-Matrix/changes View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181087#4181087 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181087

16 years, 3 months

1
0
0 / 0

[Design of Messaging on JBoss (Messaging/JBoss)] - Re: Some comments on new scheduled delivery work

by clebert.suconic＠jboss.com

I don't know how that would apply to your test.. the the PagingStore has a method to startPaging and startDepage. But if you are using regular sending of messages in your test, a depage might start sooner, as the size of the page is tested on every ACK. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181085#4181085 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181085

16 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by david.lloyd＠jboss.com

I guess the simplest way to solve the problem is to have bogus URL handlers defined on the boot classpath for all the URL schemes we want, and then once the container is booted far enough, it can install a URLStreamHandlerFactory that loads the "correct" handler factories from then on. This will work around the check that the URL constructor does. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181084#4181084 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181084

16 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by david.lloyd＠jboss.com

Yes, that's what I said. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181081#4181081 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181081

16 years, 3 months

1
0
0 / 0

[Design of JBoss Web Services] - Use "context listener" in Web Service as "ServletContextList

by pandatao

Dear forum, Currently I am working on a J2EE/JBoss web service project. I'd like to use a simillar "context listener" in a web service project, just as the "ServletContextListener " has done in a web GUI application (WAR). The package structure of a web service project is different from a web application project. E.g. there is neither "web.xml" file nor "WEB-INF" folder in a web serivce project package. I am new in JBoss web service, any help and response will be very appreciated! Thanks in advance, Tao View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181078#4181078 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181078

16 years, 3 months

1
0
0 / 0

[Design of JBoss jBPM] - Re: meeting context

by kukeltje

hmm.... post got cut off... here is the rest: ... Which is down right incorrect. The difference in the required java code is one line, so at least the statement should have been the same. Just as with the milestone as I demonstrated in my blog. Second thing is that they evaluated 3.1.4 and we are already on 3.2.3, so the evaluation is even old in that regard. I dare to say that from the control-flow patterns, almost all (and certainly the most used ones) can be easily implemented. And I (as does Tom I'm sure of that) never said or never had the intention that jPDL should not be extended with out of the box support, with real language constructs so without jBPM providing e.g. delegation classes. In fact, jBPM4 is a great moment to supprt more language constructs, certainly with the addition of you and Thomas to the team (remember, for me it just a hobby!!!) Besides that, they also evaluated the standards and not even those support all of the patterns... Nice BPMN related article in this regard is from Michael zur Muehlen on "how much BPMN do you need" [7]. If you take the 80/20 rule into account, I think jBPM did great, almost perfect, not with support of BPMN but the tradeoff for the 'patterns' To make a long story short... it`s all in all not that bad maybe marketing wise, but we can work on that Ok, now lets switch to BPMN. Up until a year ago, BPMN was not hot (not sure it is now, maybe it skipped the hype state and is going 'mainstream'). Some real business designers supported it. Besides that, there was no executable language so some other suppliers had converters, most one-way, some (limited) round-trip. jBPM focussed (focusses) not only on the business designers but also at the people implementing the process (a joint-effort). BPMN was just to much overhead with the limited resources. Ok, the graphical representation could (should?) have been used for those parts that are supported in JPDL, but that should have been it. The eclipse STP-BPMN desiger which is now becomming available might be interesting. Initially with an export function (although that should yield something really usable in the GPD) and maybe they can grow together and JBoss delivers an STP-BPMN-JPDL designer. Heck maybe even JPDL and XPDL grow closer [3] http://www.workflowpatterns.com/patterns/control/multiple_instance/wcp13.php [4] http://www.workflowpatterns.com/patterns/control/multiple_instance/wcp14.php [5] http://www.workflowpatterns.com/evaluations/index.php [6] http://www.workflowpatterns.com/evaluations/opensource/jBPM.php [7] http://www.bpm-research.com/2008/03/03/how-much-bpmn-do-you-need/ Shoot... I should have made this into a blog entry.... maybe I still will. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181071#4181071 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181071

16 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by anil.saldhana＠jboss.com

"david.lloyd(a)jboss.com" wrote : Ah, I see. It's obvious now that I try it out: the policy file parser is literally constructing a URL instance during the parsing stage, which fails because the appropriate URL handler is missing. | | So I guess the real question is: it the best solution to implement a custom policy interpreter that can handle arbitrary URIs, or to come up with a way to trick the URL protocol registry system to allow the URL handler to be "lazy-loaded"? http://java.sun.com/j2se/1.5.0/docs/api/java/security/ProtectionDomain.ht... CodeSource needs an URL instance for instantiation. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181070#4181070 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181070

16 years, 3 months

1
0
0 / 0

[Design of Security on JBoss] - Re: Policy Implementation for VFS

by anil.saldhana＠jboss.com

We can implement an alternative Policy Class implementation. But the flip side is that the configuration is done in lib/security/java.security file of the JDK. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4181068#4181068 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4181068

16 years, 3 months

1
0
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-dev-forums October 2008