[jboss-jira] [JBoss JIRA] (AS7-2998) Lock down the ability to set/reset EJB client context selector on the server side by user code

[Stuart Douglas (JIRA)]

    [ https://issues.jboss.org/browse/AS7-2998?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12662635#comment-12662635 ] 

Stuart Douglas commented on AS7-2998:
-------------------------------------

I don't think that this is really possible to do without breaking the :reload command, as org.jboss.as.ejb3.remote.DefaultEjbClientContextService will not be able to start a second time, as the selector will be locked. 

Adding an unlock method also seems to be kinda pointless, as it means that client code could simply unlock and then set the selector. 

I think that the existing security check is probably sufficient to handle this. 
                
> Lock down the ability to set/reset EJB client context selector on the server side by user code
> ----------------------------------------------------------------------------------------------
>
>                 Key: AS7-2998
>                 URL: https://issues.jboss.org/browse/AS7-2998
>             Project: Application Server 7
>          Issue Type: Task
>          Components: EJB
>            Reporter: jaikiran pai
>            Assignee: jaikiran pai
>             Fix For: 7.1.0.Final
>
>
> On the server side we shouldn't allow setting/resetting the EJB client context selector, by the user code. An API to lock down setting the selector is being added in the next version of EJB client API. The server should use that API to lock down the selector once it has setup the server wide selector.
> Creating this as a task for 7.1.0.CR1 so as to not forget adding this implementation.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira