Re: Question regarding Tuscany Policy file

2008-09-09 Thread Dan Becker
Hi Dhaval, I think the general answer to your question is a matter of degree. You need enough permission to run the Tuscany code base with security on, yet not enough permission that a malicious user could hijack a public API and use it to load or run malicious code. One method to achieve th

RE: Question regarding Tuscany Policy file

2008-09-17 Thread Dhaval Chauhan
09122008/sca/itest/bpel/helloworld/target/surefire-reports for the individual test results. ... Does anybody have any idea about this issue? -- Dhaval > Date: Tue, 9 Sep 2008 07:49:14 -0500 > From: [EMAIL PROTECTED] > To: dev@tuscany.apache.org > Subject: Re: Question regarding T

Re: Question regarding Tuscany Policy file

2008-09-18 Thread Dan Becker
s/Tuscany/java_09122008/sca/itest/bpel/helloworld/target/surefire-reports for the individual test results. ... Does anybody have any idea about this issue? -- Dhaval Date: Tue, 9 Sep 2008 07:49:14 -0500 From: [EMAIL PROTECTED] To: dev@tuscany.apache.org Subject: Re: Question regarding Tuscany Po

Re: Question regarding Tuscany Policy file

2008-09-18 Thread Dan Becker
dea about this issue? -- Dhaval Date: Tue, 9 Sep 2008 07:49:14 -0500 From: [EMAIL PROTECTED] To: dev@tuscany.apache.org Subject: Re: Question regarding Tuscany Policy file Hi Dhaval, I think the general answer to your question is a matter of degree. You need enough permission to run the T

RE: Question regarding Tuscany Policy file

2008-09-18 Thread Dhaval Chauhan
is {java.home}/lib/security...!! Thanks, Dhaval > Date: Thu, 18 Sep 2008 11:18:37 -0500 > From: [EMAIL PROTECTED] > To: dev@tuscany.apache.org > Subject: Re: Question regarding Tuscany Policy file > > A followup. Dhaval, I did see the Maven Surefire security exception

Automating the security enable build in Continuum, was Re: Question regarding Tuscany Policy file

2008-09-18 Thread Luciano Resende
> Date: Thu, 18 Sep 2008 11:18:37 -0500 >> From: [EMAIL PROTECTED] >> To: dev@tuscany.apache.org >> Subject: Re: Question regarding Tuscany Policy file >> >> A followup. Dhaval, I did see the Maven Surefire security exception >> below when I ran Tuscany with the security

Re: Automating the security enable build in Continuum, was Re: Question regarding Tuscany Policy file

2008-09-18 Thread Jean-Sebastien Delfino
Luciano Resende wrote: Should we create a build profile to run the security enable build in the Continuum environment ? I can help with that, just want to check if we can point to a policy file from our svn or relative to sca checkout, as we won't have easy access to place/update the policy file

Re: Automating the security enable build in Continuum, was Re: Question regarding Tuscany Policy file

2008-09-19 Thread Simon Laws
On Fri, Sep 19, 2008 at 6:36 AM, Jean-Sebastien Delfino < [EMAIL PROTECTED]> wrote: > Luciano Resende wrote: > >> Should we create a build profile to run the security enable build in >> the Continuum environment ? >> >> I can help with that, just want to check if we can point to a policy >> file f

Re: Automating the security enable build in Continuum, was Re: Question regarding Tuscany Policy file

2008-09-19 Thread Mike Edwards
+1 to turn it on for the default build. Yours, Mike. Simon Laws wrote: On Fri, Sep 19, 2008 at 6:36 AM, Jean-Sebastien Delfino <[EMAIL PROTECTED] > wrote: Luciano Resende wrote: Should we create a build profile to run the security enable build in

Re: Automating the security enable build in Continuum, was Re: Question regarding Tuscany Policy file

2008-09-19 Thread Dan Becker
+1 to enable An example tuscany.policy file is attached to this article. http://cwiki.apache.org/confluence/display/TUSCANY/Running+Tuscany+with+Java+2+Security+Enabled Run the security profile by name (tuscany.policy in {java.home}/lib/security): mvn test -P security or run the security pr