[JBoss JIRA] Created: (JBCLUSTER-145) Addd session passivation docs
by Hany Mesha (JIRA)
Addd session passivation docs
-----------------------------
Key: JBCLUSTER-145
URL: http://jira.jboss.com/jira/browse/JBCLUSTER-145
Project: JBoss Clustering
Issue Type: Task
Security Level: Public (Everyone can see)
Affects Versions: Q3Y6
Reporter: Hany Mesha
Assigned To: Hany Mesha
Fix For: Q3Y6
Add session passivation docs to the AS Guide. The docs will include introduction to session passivation for http session replication and how to enable session passivation. Conditions and limition on the cache configuration with session passivation such as cache loader store should always be non-sharable among cluster nodes. Also a wiki page to explain session passivation for http session replication and FAQs
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 6 months
[JBoss JIRA] Created: (JASSIST-23) Java 2 Security ProtiectionDomain is not associated with new generated classes
by Renat Zubairov (JIRA)
Java 2 Security ProtiectionDomain is not associated with new generated classes
------------------------------------------------------------------------------
Key: JASSIST-23
URL: http://jira.jboss.com/jira/browse/JASSIST-23
Project: Javassist
Issue Type: Bug
Environment: IBM WebSphere 5.1 with J2EE Security ON, Javassist 3.0, Tapestry 4.1, HiveMind 1.1.1
Reporter: Renat Zubairov
Assigned To: Shigeru Chiba
Priority: Blocker
Attachments: exception.txt
Classes that are generated using Javassist have no associated protection domain therefore it is not possible for JVM to assign permissions based on the static JAR files names, this is severe problem because it is not possible to grant permissions, hence all permissions are vorbidden, since that nothing works.
Javassist is used by HiveMind to generate proxy classes for it's services, an see the stack trace (in attachment) the generated classes can't be associated with any ProtectionDomain, therefore
_any Javassist supported application is impossble to start under strict security in Java_.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
19 years, 6 months