[RELEASE] Spring for Apache Geode Release & Feature Update

2019-07-03 Thread John Blum
Greetings Apache Geode community- I wanted to take this opportunity and let you all know about the recent developments in the *Spring* ecosystem as it relates to Apache Geode for all you *Spring* users out there. ~~ 1. *Spring Data for Apache Geode* (SDG) Lovelace-SR9 (2.1.9.RELEASE) a

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-03 Thread Dan Smith
With Juan's proposal, the user still has the option to use java's security manager. They can install a MethodAuthorizor that allows all methods and use a java SecurityManager to restrict method access to the methods they want. Regarding the question of "How far should we go to prevent users from s

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-03 Thread Juan José Ramos
Hello, Thanks for the feedback provided so far. I'm still resilient to add the *Java Security Manager* as an option, maybe it's due to my lack of experience around the subject but I still believe it is killing mosquitoes with a bazooka. We need to prevent this "bad things" only from within the OQL