From: Adam R. <ad...@ex...> - 2010-03-25 16:27:40
|
> shouldn't those functions be limited to a dba user? Allowing guest to > download any jar file from certain eXist directories seems to be a > security issue. Yes I would agree to that as well. It should only be DBA, for example what about my potentially proprietary extensions and libraries to eXist that are top secret that I keep in lib/endorsed and lib/user, I certainly dont want anyone gaining access to those files! As such if it does require DBA style security, then this module seems somewhat redundant as you could just use the file module! > Wolfgang > > ------------------------------------------------------------------------------ > Download Intel® Parallel Studio Eval > Try the new software tools for yourself. Speed compiling, find bugs > proactively, and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > _______________________________________________ > Exist-development mailing list > Exi...@li... > https://lists.sourceforge.net/lists/listinfo/exist-development > -- Adam Retter eXist Developer { United Kingdom } ad...@ex... irc://irc.freenode.net/existdb |