Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-02 Thread Juan José Ramos
Hello Jake, I've been doing some reading about the *Java Security Manager* and, even when it might work for our use case, I don't think is a good fit due to the following reasons: 1). We already have chosen *Shiro* for authentication and authorization, adding yet another security framework (and ma

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-02 Thread Jacob Barrett
> On Jul 2, 2019, at 11:58 AM, Juan José Ramos wrote: > > Hello Jake, > > I've been doing some reading about the *Java Security Manager* and, even > when it might work for our use case, I don't think is a good fit due to the > following reasons: > 1). We already have chosen *Shiro* for authen

Re: [PROPOSAL]: Improve OQL Method Invocation Security

2019-07-02 Thread Jason Huynh
Are security manager policies modifiable on the fly? Just wondering if someone decides they want to disallow or allow something, will they need to restart their vms/geode node? I think Dan pointed this out earlier in the thread, but just wanted to have us consider the original cve that led to the