[
https://issues.apache.org/jira/browse/TOMEE-423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13460417#comment-13460417
]
Romain Manni-Bucau commented on TOMEE-423:
------------------------------------------
i'll add a doc page on the servlet but i think we can't remove it by default.
Since TomEE webapp is exploded it should be a drawback. I'll have a look to add
an init param activated true/false too (activated by default) which could ease
it too
does it sound fine for you?
> Move TomEE's transport out of the tomee's management UI web app
> ---------------------------------------------------------------
>
> Key: TOMEE-423
> URL: https://issues.apache.org/jira/browse/TOMEE-423
> Project: TomEE
> Issue Type: Improvement
> Affects Versions: 1.0.0, 1.5.0
> Reporter: Alex the Rocker
>
> As a measure of security hardening, people want to delete the application
> server's management UI to prevent remote access to it ; especially for app
> servers exposed to Internet access.
> Problem with removing tomee from webapps directory is that it contains EE
> features such an EJB transport.
> This JIRA is to request a separation of TomEE transport features from TomEE
> management web app ; so that this later web app can safely deleted without
> risking any regression for web applications run-time features.
> Apache Tomcat supports with process, so it can be a showstopper for
> organizations considering a move from Tomcat to TomEE.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
