[jboss-dev-forums] [Design of Security on JBoss] - How to stop application code access to JBoss system/server c

[krishc]

Hi,

Does JBoss server have any feature through which application code "will not" get access to JBoss system/server classes (any security sensitive classes) ? As I understand, any application user can walk their way to JBoss internal classes through classloading heirarchy or use reflection to achieve the same ?

Thanks,
Krish 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3981928#3981928

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3981928