Re: fine grained security with SubjectTrackingMBeanServer example
Luis-Miguel Alventosa <[email protected]>
| Newsgroups | gmane.comp.java.mx4j.user |
|---|---|
| Organization | Sun Microsystems, Inc. |
| Message-ID | <[email protected]> |
Hi Alper, I wouldn't like to hijack the MX4J forum to answer questions on Sun's JMX implementation so please post your messages to the mailing list [email protected] instead. Thanks a lot, Luis > Alper Akture wrote: > > Hi Luis-Miguel, > > It appears that for every call to mbsc.addNotificationListener(), the > Subject is always null. Do all these calls go through the > MBeanServerDelegate? I think in my case, this may not be a big deal, since > for someone to register as a notification listener, they would need to know > the ObjectName. And to get the ObjectName, those methods do have the Subject > set, and I can check the privileges of the user. However, I guess it could > be possible for someone to "guess" an ObjectName, and register as a > listener, who would normally not have access to the MBean in question. > > Thanks, > Alper ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642