Re: isolation of web services deployed on axis

[Bill de hÓra]

Steve Loughran wrote:

The trouble with isolation is that you have to be thorough. you need
isolated
-classloaders
-jndi
-jmx
-rpc
-anything else provided by the container

servlet engines provide exactly this isolation between webapps. There is no
point redoing this in axis, as all we'd end up doing is reinventing stuff
and chasing security issues wherever we missed a bit. And then we still
wouldnt integrate properly with the isolation provided by the hosting app
server.

Its easy to add axis.jar to an existing webapp. lets stick with what is
known, working and documented.

Y'all should review Isolates (JSR 121) to see if your use case(s) are covered - Isolates will part of JDK 1.5.

<http://www.jcp.org/en/jsr/detail?id=121>

Bill de hÓra