[jboss-dev-forums] [JBoss AS 7 Development] - Access control notes

[Brian Stansberry]

Brian Stansberry [https://community.jboss.org/people/brian.stansberry] commented on the document

"Access control notes"

To view all comments on this document, visit: https://community.jboss.org/docs/DOC-48596#comment-11901

--------------------------------------------------
> DMR API and Wireformat
> 
> + separate static security meta data from dynamic runtime headers?
> ++ static: part of "read-resource-access"
> ++ dynamic: indication of enforced constraints as part of a DMR response (i.e suppressed elements)
> 

Yes. The dynamic part is only relevant for read-resource (perhaps read-resource-description) where part of the result might be filtered. For something like read-attribute, the operation would fail if access was not allowed.
--------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20130416/5a0f32b7/attachment.html