[rules-users] drools quirks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I just started using drools and this is my first time implementing a rules engine. Everything has been pretty smooth but I have some quirks that I am not sure I can live with. 1) for some reason, if I execute the Knowlege session against an object, the knowlege session never returns. The only way I can get the ksession to return is to make IF (obj == null) part of the LHS and make modify($input){setObj("complete")} part of the RHS This seems like a deficiency since I have users writing their own rules, I can see them forgetting this requirement. IS their a way to get the ksession to firerules only once? If so what does that look like? 2) It seems that any code I want can be executed in the RHS. I could literally execute something like the following in the RHS. byte[] b= new byte[10000000000000]; // Really big memory waste I also could just start a bunch of threads. The point is that I am intending to let the users write their own rules but I can't do that if there are no restrictions on how/what can be done inside the rules. Any suggestions? Are there sandboxes or filters I can activate to restrict the RHS? - -- Cheers, Matt Young solid(a)youngdev.net http://youngdev.net