On Mon, 6 Nov 2000 15:05:21 -0800, Jonathan Weedon <[EMAIL PROTECTED]>
wrote:
>It is interesting to think of the restrictions in the EJB specification
>as security based. I have always thought of the restrictions as a way
>to handle resource usage. You are describing the Application Server
>as the big brother of an Applet Server. For Applets, a sand-box is used
>to restrict access. You are indicating that EJBs would run in a similar
>sort of sand-box, and if you need to do things that are not allowed in
>the sand-box, you write a utility library.
Right.
>This makes a lot of sense given Telkel's ambitions of providing EJB
>hosting software. You want to be careful about what the hosted EJBs do,
>in order to prevent them from making malicious or otherwise inappropriate
>access to the environment.
Right.
>I look at things a little differently. To me, the limitations in the
>EJB spec are motivated much more by the need to be able to scale arbitrarily.
>So, for example, if my EJBs make access directly to the file system, it
>is very hard to scale them. Why? Well, the file system is typically a
>very scarce resource, with often a per-process limit on the number of file
>desriptors. Unless you permit the AppServer (by which I mean the compliment
>of your EJB code) to control how you access the file system, you may very
>quickly run into scaling limitations, in that you can only have as many
>concurrent EJBs as there are file descriptors.
Right. I was talking about the case where "hey, we *need* to use I/O.
How do we do it?". If you really really need to do it: use an external
library. Put a JDBC or JNDI interface on top of it to make it as
non-proprietary as possible.
/Rickard
--
Rickard �berg
Email: [EMAIL PROTECTED]
http://www.telkel.com
http://www.jboss.org
http://www.dreambean.com
===========================================================================
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff EJB-INTEREST". For general help, send email to
[EMAIL PROTECTED] and include in the body of the message "help".
