David E Jones wrote: > > This is a good question. Does anyone actually USE this? It's an > interesting feature, but perhaps we should turn it off by default (leave > it there, but commented out in the ofbiz-containers.xml file). > > If any does use this, please speak up. If anyone doubts they will ever > use this, also please speak up...
As for the security restrictions(or severe lack there of, for this), we tend to use standard jsp pages, that require normal login protection(and the full support that ofbiz gives for that), to implement 'remote-control' of events. If ofbiz is suppsoed to be a set of best practices, then this is *not* one of them. I vote for removing it, and *not* leaving it commented out.
