[
https://issues.jboss.org/browse/WFLY-11125?page=com.atlassian.jira.plugin...
]
Brian Stansberry updated WFLY-11125:
------------------------------------
Description:
The more optional deps the Weld subsystem module has, the better as it helps allow slimmer
runtimes.
1) org.jboss.as.security -- classes from this module (SimpleSecurityManager[Service]
should only be loaded if the org.wildfly.legacy-security capability is present, so this
dep can be optional.
-2) org.picketbox -- AFAICT these are only used via
org.jboss.weld.security.spi.SecurityServices impl methods that are never called. And it
seems like they wouldn't be expected to work without the org.wildfly.legacy-security
capability being present anyway. So I believe this dep can be optional.-
(Edited to comment out the second point since a) the SecurityServices methods are indeed
called and b) it's not obvious they'd never be expected to be called without the
security subsystem. Probably wouldn't work right but it's too complex a task to
validate that.)
was:
The more optional deps the Weld subsystem module has, the better as it helps allow slimmer
runtimes.
1) org.jboss.as.security -- classes from this module (SimpleSecurityManager[Service]
should only be loaded if the org.wildfly.legacy-security capability is present, so this
dep can be optional.
2) org.picketbox -- AFAICT these are only used via
org.jboss.weld.security.spi.SecurityServices impl methods that are never called. And it
seems like they wouldn't be expected to work without the org.wildfly.legacy-security
capability being present anyway. So I believe this dep can be optional.
Make org.jboss.as.security module an optional dependency of
org.jboss.as.weld
-----------------------------------------------------------------------------
Key: WFLY-11125
URL:
https://issues.jboss.org/browse/WFLY-11125
Project: WildFly
Issue Type: Enhancement
Components: CDI / Weld, Security
Reporter: Brian Stansberry
Assignee: Brian Stansberry
Priority: Major
The more optional deps the Weld subsystem module has, the better as it helps allow
slimmer runtimes.
1) org.jboss.as.security -- classes from this module (SimpleSecurityManager[Service]
should only be loaded if the org.wildfly.legacy-security capability is present, so this
dep can be optional.
-2) org.picketbox -- AFAICT these are only used via
org.jboss.weld.security.spi.SecurityServices impl methods that are never called. And it
seems like they wouldn't be expected to work without the org.wildfly.legacy-security
capability being present anyway. So I believe this dep can be optional.-
(Edited to comment out the second point since a) the SecurityServices methods are indeed
called and b) it's not obvious they'd never be expected to be called without the
security subsystem. Probably wouldn't work right but it's too complex a task to
validate that.)
--
This message was sent by Atlassian Jira
(v7.12.1#712002)