This content has been marked as final. Show 2 replies
Do we want to bind Local interfaces to the java: namespace? This would eliminate all of the logic for checking to see if a Local interface was looked up on a remote JBoss instance. If you can look it up, it's valid ...
No it doesn't. Somebody in the same server could look it up and return it as
the result of a remote invocation.
That's a good point. As stupid as doing that is, somebody will do it. You've convinced me - I'll finish merging the logic from 4.2 to prevent users from calling local interfaces remotely.