[GEODE-6994] Documentation for OQL Method Invocation Security

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.12.0
• Component/s: docs
• Labels: GeodeCommons
• Assignee: Ernest Burghardt
• Reporter: Juan Ramos
• Created: 19/Jul/19 17:56
• Updated: 30/Mar/20 23:33
• Resolved: 29/Nov/19 12:59

Description

Delete the Method Invocations Section and add a new page, on which detailed documentation should be added about the following:

• The new OQL Method Invocation Security feature.
• How to configure the new OQL Method Invocation Security feature.
• Each Out of Box Implementation: pros, cons and security risks associated with each one (check the table within the Introduction for details).
• Interface MethodInvocationAuthorizer and how/when the user needs to provide its own. Requirement about the thread-safety and performance of the implementation.
• Deprecation of the system property QueryService.allowUntrustedMethodInvocation and how it can be replaced by one of the Out of Box Implementations.

Issue Links

• is a child of: GEODE-6983 Epic for OQL Method Invocation Security
• links to: GitHub Pull Request #4325