[jboss-dev-forums] [Management Development] - Profiles in domain.xml

[David Lloyd]

David Lloyd [http://community.jboss.org/people/david.lloyd%40jboss.com] replied to the discussion

"Profiles in domain.xml"

To view the discussion, visit: http://community.jboss.org/message/545949#545949

--------------------------------------------------------------
> Scott Stark wrote:
> 
> We need the ability to lock down the features and configuration on a server. That is not to say that there is a need to support the implied capabilities given a set of applications. However, that would require some processing of the deployment in order to determine what capabilities were in use, including resources. So, if there is an abstraction like:
> 
> <applications>
>    <web-app name="my-store" context-root="/the-best-store" ...>
>    </web-app>
> </applications>
> 
> how much work has to be done to adequately identify the required capabilities? We can define the default capabilities implied by the various application types, but ultimately the user should be able to trim that down if they are not using certain features.
> 
> I still think the best comprimise would be to have profile definitions in the domain in terms of the required capabilities potentially simplified by having implied capabilities associated with each application type that could be overriden by the admin.

OK so what I'm getting from this is a new requirement:

> "It shall be possible within domain.xml to specify what capabilities/subsystems are allowed (whitelist) or disallowed (blacklist) in order to ensure that undesired subsystems are not inadvertently started causing unexpected performance penalties."

If we make this optional we get the best of both possible worlds.  On the one hand, only minimal configuration is required (the default would be an empty blacklist).  On the other hand, administrators can ban only certain subsystems, or lock it down tight if they want.

--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/545949#545949]

Start a new discussion in Management Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2107]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20100602/8496d2f2/attachment.html