VFSPermission should imply a FilePermission
-------------------------------------------
Key: JBVFS-79
URL:
https://jira.jboss.org/jira/browse/JBVFS-79
Project: JBoss VFS
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Reporter: Anil Saldhana
Adrian says:
==============================
vfs permissions implying other permissions. e.g. permission to
vfsfile:/something/in/my/codesource
should imply
http://java.sun.com/j2se/1.4.2/docs/api/java/security/Permission.html#imp...
permission to file:/something/in/my/codesource
and using the java.io.File api to access it.
see for example FileURLConnection
/**
* Return a permission for reading of the file
*/
public Permission getPermission() throws IOException
{
return new FilePermission(file.getPath(), "read");
}
This is also important for making sure you can't use vfs urls
to open connections to things you are not allowed to access.
Although I think in that case, the actual vfs implementation
code will barf later if you don't have the permission?
===========================================
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira