[jboss-dev-forums] [Design of Security on JBoss] - Re: PrivilegedBlock location

[scott.stark@jboss.org]

The code calling the aop layer should have the getClassLoader permission since its expected that loading/generating aspects will need access to it, and user code should not be able to do this without specific permissions.

In this case the ClientSessionDelegate should have a privileged block.


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190711#4190711

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4190711