Thread pool AccessControlContext Propagation -------------------------------------------- Key: WFLY-2440 URL: https://issues.jboss.org/browse/WFLY-2440 Project: WildFly Issue Type: Task Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 10.0.0.Alpha3 A decision was made within Java that newly created threads should inherit the access control context of their creator. In general this was justified on the basis that if you are creating a thread you want it to inherit the permissions you already have. Once we introduce thread pooling that logic no longer makes as much sense and there is not the same relationship between the thread that triggers it's creation and the long term life of that thread. This may affect components outside of WildFly but I am raising it here as a top level task. Should also note that JBoss Threads does already have some protection built in if a security manager is in use but there are times the AccessControlContext will be used without a security manager so more control is required.