[ 
https://issues.apache.org/jira/browse/GEODE-1960?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15799177#comment-15799177
 ] 

Swapnil Bawaskar commented on GEODE-1960:
-----------------------------------------

As a temporary workaround, GEODE-2146 requires DATA:MANAGE as well as 
CLUSTER:MANAGE permission to deploy a function. We should revert to requiring 
only DATA:MANAGE once we are able to sandbox the function execution.

> Provide protection against malicious developer jars deployed as functions
> -------------------------------------------------------------------------
>
>                 Key: GEODE-1960
>                 URL: https://issues.apache.org/jira/browse/GEODE-1960
>             Project: Geode
>          Issue Type: Improvement
>          Components: functions, security
>            Reporter: Diane Hardman
>            Priority: Minor
>
> Provide protection for functions that might contain malicious calls like 
> System.exit().



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to