[jboss-dev-forums] [JBoss AS 7 Development] - Access control notes

[Brian Stansberry]

Brian Stansberry [https://community.jboss.org/people/brian.stansberry] commented on the document

"Access control notes"

To view all comments on this document, visit: https://community.jboss.org/docs/DOC-48596#comment-11900

--------------------------------------------------
A question for server-groups is resources that are not directly referenced by the server-group (e.g. a profile) or contained by something directly referenced (e.g. a subsystem) but rather are only brought in via indirect references (e.g. a path or interface) or convention (e.g. system properties).

My inclination would be any simple system where we allow restriction to a given server-group would restrict access to such resources.

It's possible we could analyze the socket-binding-group resource and determine whether an interface is relevant.  I can't see doing that for paths or system properties.
--------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20130416/c49f034f/attachment.html