[jboss-dev-forums] [Design of POJO Server] - Re: VFS Permissions - JBMICROCONT-149

adrian@jboss.org do-not-reply at jboss.com
Thu Nov 20 09:33:49 EST 2008


"alesj" wrote : "flavia.rainone at jboss.com" wrote : 
  |   | I think we should wait for Kabir to return from his vacation (next Monday) to see what he says about this.
  |   | 
  | It's not an AOP issue.
  | AOP just uses VFS's in-memory mechanism.
  | 
  | The issue is whether we should create some reproduceable
  | url for in-memory stuff in InMemoryClassesDeployer.
  | 
  | But I still don't see how this would help Anil's security issue,
  | as it would still be a vfs url - which is THE topic of this discussion.
  | 
  | There is no way to turn it into 'real' url, no matter what we do before.

Can't you change the in memory vfs context construction to allow you to
specify the "RealURL". The InMemoryClassesDeployer would populate it with
the "RealURL" of the VFS (Sub)Deployment.

Then VFSUtils.getRealURL() would then automatically return whatever you specify
when it delegates to the in memory vfs context.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190905#4190905

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4190905



More information about the jboss-dev-forums mailing list