Re: The value of peer in AuthenticationPermission
Bob Scheifler <[email protected]>
| Newsgroups | gmane.comp.java.sun.jini |
|---|---|
| Message-ID | <[email protected]> |
> I'm wondering how important it is to specify the peer in the > AuthenticationPermission you grant to a protection domain when making > remote calls, or especially what kind of harm can arise from not > specifying them (complete wildcarding of the peers). The limit of your question is how important is it to grant less than AllPermission. There's no absolute answer; it depends on whether you trust the code/issuing party to not exercise permissions it shouldn't be using, and what damage you're willing to accept if that trust is violated. - Bob -------------------------------------------------------------------------- Getting Started: http://www.jini.org/wiki/Category:Getting_Started Community Web Site: http://jini.org jini-users Archive: http://archives.java.sun.com/archives/jini-users.html Unsubscribing: email "signoff JINI-USERS" to [email protected]