Nick Sieger wrote:
> On Tue, Jan 27, 2009 at 9:05 AM, Charles Oliver Nutter
> <
charles.nutter@...> wrote:
>> This is a good find. Can you add something to the wiki?
>>
>> I guess we've always figured there might be servers that restrict security
>> in such a way that limits how we deploy WAR stuff right now. Is there any
>> discussion or recommendation on how apps should deal with this? Modifying
>> the security policy works, but I'm predicting some time in the future when
>> some large company has Tomcat 6 in production and their production staff
>> refuses to adjust security policies. What do we do then?
>>
>> Any research you can do here would be a great help :)
>
> One thought is that it's probably possible to read the files with
> ServletContext.getResource/getResourceAsStream, except that we'd have
> to change the way files are read using load/require. Perhaps a
> pluggable load service where we shuttle load/require requests through
> these APIs rather than the normal filesystem APIs would help.
That's not a bad idea; Ola already wired in some logic whereby they can
provide their own loadservice implementation in Mingle that knows how to
load encrypted files. Loading files from a secured location via other
means (like getResource) is probably the same sort of thing.
- Charlie
---------------------------------------------------------------------
To unsubscribe from this list, please visit:
http://xircles.codehaus.org/manage_email
