[jboss-dev-forums] [Design of JBoss jBPM] - Re: console file upload

david.lloyd@jboss.com do-not-reply at jboss.com
Wed May 30 09:37:25 EDT 2007


This function does not exist in the current console.  One of the key requirements is that the console is usable out of the box for administration of a jBPM installation.  The GPD relies on  unauthenticated access to upload processes.  Therefore we should have a separate WAR file that contains this servlet (and any other development-time no-security servlets) that can be deployed during development and removed in a production environment.  Otherwise we have a pretty scary security hole.

Ideas?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4049723#4049723

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4049723



More information about the jboss-dev-forums mailing list