3 Replies Latest reply on Nov 11, 2008 1:39 PM by Scott Stark

    Fine grained permissions

    Adrian Brock Master

      WRT to this post http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187521#4187521
      where Ales asked me to raise the JIRA issue.

      We need to decide what we are going to do first.

      This should be similar to the MBeanPermission
      http://java.sun.com/j2se/1.5.0/docs/api/javax/management/MBeanPermission.html
      where the permission has both an id and an action.

      I'd keep it simple for now and just have simple ids and don't worry about the action
      (i.e. just have '*' meaning all)
      The only complication is making sure aliases get resolved to their real id.

      Longer term, we'd probably want even more fine grained control for actions
      i.e. differentiate create, inject, install and invoke and probably
      registering an event listener (others?)