[Red Hat JIRA] (JBEE-190) AuthConfigFactory.getFactory() checking wrong permission.
by Darran Lofthouse (Jira)
[ https://issues.redhat.com/browse/JBEE-190?page=com.atlassian.jira.plugin.... ]
Darran Lofthouse resolved JBEE-190.
-----------------------------------
Fix Version/s: jboss-jaspi-api_spec-1.0.3.CR1
Resolution: Done
> AuthConfigFactory.getFactory() checking wrong permission.
> ---------------------------------------------------------
>
> Key: JBEE-190
> URL: https://issues.redhat.com/browse/JBEE-190
> Project: JBoss Enterprise Spec APIs
> Issue Type: Bug
> Components: jboss-jaspi-api
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Major
> Fix For: jboss-jaspi-api_spec-1.0.3.CR1
>
>
> The method currently performs the following check: -
> {code:java}
> //Validate the caller permission
> SecurityManager sm = System.getSecurityManager();
> if (sm != null)
> sm.checkPermission(new SecurityPermission("getFactory"));
> {code}
> However it is supposed to be using 'getFactorySecurityPermission'.
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 9 months