[jboss-dev-forums] [Design of JBoss Remoting, Unified Invokers] - Re: Remoting and remote classloading

[ron.sigal@jboss.com]

"scott.stark*jboss.org wrote : 
  | The Connector would simply have a permission check. The permission would be mapped to jboss code by the permission CodeSource. Whoever sets up the security policy effectively defines jboss/server code from application code based on the permission urls. 
  | 

Ah, so, just something like this:


  | public void setClassloaders(List classloaders)
  | {
  |    SecurityManager sm = System.getSecurityManager();
  |    if (sm != null)
  |    {
  |       sm.checkPermission(new RuntimePermission("setContextClassLoader"));
  |    }
  |    
  |    this.classloaders = classloaders;
  | }
  | 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4169470#4169470

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4169470