Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
4.7.0
-
None
Description
ServiceAccessController does not call checkHostsAuthorization() and therefore, the user is unable to set a list of ip addresses that can access the server (using the only_from property). All addresses are always allowed. I believe this used to be supported with OpenEJB 2.