-
Task
-
Resolution: Obsolete
-
Major
-
None
-
None
-
Documentation (Ref Guide, User Guide, etc.), Release Notes
Right now JBC instances created via the CacheManager are accessible by any code that injects the CacheManager. If the CacheJmxWrapper is registered in JMX, the cache is also available to any code running in the VM (via the getCache() attribute).
This needs to be locked down, otherwise code that has no business looking at cache content can access a cache.
- blocks
-
JBAS-1900 Clustered webapp shouldn't require ClusteredSingleSignOn
- Closed