[ https://issues.jboss.org/browse/WFLY-3651?page=com.atlassian.jira.plugin.... ] Alex Hinrichs commented on WFLY-3651: ------------------------------------- After reading the page about configuring the security subsystem and some browsing I have to admin that I have no idea how to configure the server in a way that no user (authenticated or not) calling any application (without the apps from the distribution) is allowed e.g. to access the local filesystem or only some folders of the fs. That's no big deal using the JVM sec mgr even if this has a big impact on the performance. Could you point me to any helping resource please? -- This message was sent by Atlassian JIRA (v6.3.1#6329)