Alejandro Guizar [
http://community.jboss.org/people/alex.guizar%40jboss.com] replied to
the discussion
"JBPM-2792 allow update with hql/sql"
To view the discussion, visit:
http://community.jboss.org/message/551891#551891
--------------------------------------------------------------
Intuitively I agree with Maciej, although nothing prevents one from invoking
EnvironmentImpl.getFromCurrent(Session.class).createQuery().executeUpdate() from a custom
or java activity, which makes any protection quite easy to defeat. The update attribute in
the hsql/sql activities is enough to prevent unintended updates.
--------------------------------------------------------------
Reply to this message by going to Community
[
http://community.jboss.org/message/551891#551891]
Start a new discussion in jBPM Development at Community
[
http://community.jboss.org/choose-container!input.jspa?contentType=1&...]