Changes between Initial Version and Version 2 of Ticket #838


Ignore:
Timestamp:
06.10.2015 06:49:39 (6 years ago)
Author:
jri
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #838

    • Property Status changed from new to accepted
    • Property Summary changed from Storage must not be an OSGi service to Only Core must be permitted to consume the Storage service
  • Ticket #838 – Description

    initial v2  
    1 In particular in conjunction with #835 a plugin could access the DeepaMehtaStorage service directly and thus bypass access control as implemented in Core. The module `deepamehta-storage-neo4j` should be just a library and provide no OSGi service. Accessing the storage is a privilege of Core. 
     1In particular in conjunction with #835 a plugin could access the DeepaMehtaStorage service directly and thus bypass access control as implemented in Core. Accessing the storage must be a privilege of Core. 
     2 
     3To realize that we could choose among these approaches: 
     4* Make module `deepamehta-storage-neo4j` just a library which provides no OSGi service. 
     5* Secure storage service access by the means of a `org.osgi.framework.ServicePermission`.