glassfish
  1. glassfish
  2. GLASSFISH-14785

Direct JMX access to instances should allow only monitoring access, not control access

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.1
    • Fix Version/s: 3.1.2.2, 4.0_b35
    • Component/s: amx
    • Labels:
      None
    • Environment:

      Operating System: All
      Platform: All

      Description

      One of our security requirements is to prevent users from contacting instances
      directly and making configuration changes. Direct access connections to
      instances using JMX are OK but the user should not be able to make config changes.

        Issue Links

          Activity

            People

            • Assignee:
              Tim Quinn
              Reporter:
              Tim Quinn
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: