[jboss-dev-forums] [Design of JBoss jBPM] - Re: console security

[david.lloyd@jboss.com]

"tom.baeyens at jboss.com" wrote : david, what is the status on the user names ?

It's not quite a simple search/replace.  I'm working out a way to make the replacement without breaking unit tests.  Should be done today.

"tom.baeyens at jboss.com" wrote : can you also activate the security in the web.xml again ?

I could, but why?  I think for the initial deployment/evaluation, it's easiest for the end user to just go straight into the console.  Remember that it is an administration console, not an end-user application.  So there's no real benefit to requiring a login - not from an evaluation perspective, or a prototyping perspective.

In fact it would make it harder since the users wouldn't know what to log in as unless we put the user list on the front page - something I am unwilling to do, because the user will then have to remove the list to deploy it into production.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4054031#4054031

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4054031