[jboss-remoting-issues] [JBoss JIRA] Closed: (JBREM-977) Wrap MBean proxies in security conscious wrappers

Wrap MBean proxies in security conscious wrappers ------------------------------------------------- Key: JBREM-977 URL: http://jira.jboss.com/jira/browse/JBREM-977 Project: JBoss Remoting Issue Type: Task Security Level: Public(Everyone can see) Affects Versions: 2.4.0.CR2 (Pinto) Reporter: Ron Sigal Assigned To: Ron Sigal Fix For: 2.4.0.GA (Pinto) There are places in Remoting where either an MBean proxy or a POJO could be used, depending on configuration. For example, an org.jboss.remoting.transport.Connector can be configured with an actual POJO that implements the org.jboss.remoting.ServerInvocationHandler interface, or it could be given the ObjectName of a MBean that implements ServerInvocationHandler. In the latter case, it will create an MBean proxy. Calls to an MBean proxy should be wrapped in an AccessController.doPrivileged() call.