Unable to specify module when specifying custom JACC policy class. ------------------------------------------------------------------ Key: WFLY-5340 URL: https://issues.jboss.org/browse/WFLY-5340 Project: WildFly Issue Type: Bug Components: Security Affects Versions: 10.0.0.Beta2 Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 10.0.0.CR1 It is currently possible to specify the 'javax.security.jacc.policy.provider' system property, however it is not possible to specify a module. From the JACC specification: - _For each JRE of a J2EE 1.4 or later version Java EE application server, if the system property “javax.security.jacc.policy.provider ” is defined, the application server must construct an instance of the class identified by the system property, confirm that the resulting object is an instance of java.security.Policy, and set, by calling the java.security.Policy.setPolicy method, the resulting object as the corresponding Policy object u sed by the JRE. _ The specification only specifies that the system property identifies the class, it does not specify how. In it's simplest form we should assume this is just a class name, in a more complex form we should allow the module to be specified.