Fine grained permissions

[adrian.brock]

WRT to this post http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187521#4187521
where Ales asked me to raise the JIRA issue.

We need to decide what we are going to do first.

This should be similar to the MBeanPermission
http://java.sun.com/j2se/1.5.0/docs/api/javax/management/MBeanPermission.html
where the permission has both an id and an action.

I'd keep it simple for now and just have simple ids and don't worry about the action
(i.e. just have '*' meaning all)
The only complication is making sure aliases get resolved to their real id.

Longer term, we'd probably want even more fine grained control for actions
i.e. differentiate create, inject, install and invoke and probably
registering an event listener (others?)

[adrian.brock]

I'd keep it simple for now and just have simple ids and don't worry about the action
(i.e. just have '*' meaning all)
The only complication is making sure aliases get resolved to their real id.

The id may eventually be expanded to regular expressions or globbing?

[alesj]

globbing?

http://en.wikipedia.org/wiki/Glob_(programming) :-)

[starksm64]

Agreed. Eventually we will have an extensive list of actions similar to those of the MBeanPermission.