Add security manager's permission checking in com.arjuna.webservices11.ServiceRegistry#getRegistry -------------------------------------------------------------------------------------------------- Key: JBTM-2076 URL: https://issues.jboss.org/browse/JBTM-2076 Project: JBoss Transaction Manager Issue Type: Task Security Level: Public(Everyone can see) Components: XTS Reporter: Gytis Trikleris Assignee: Gytis Trikleris Fix For: 4.17.19, 5.0.2 Permissions checking in public static methods is needed for Common Criteria certification. Add something similar to this at the beginning of the method: {code} public static ServiceRegistry getRegistry() { SecurityManager sm = System.getSecurityManager(); if (sm != null) { sm.checkPermission(new RuntimePermission(ServiceRegistry.class.getName() + ".getRegistry")); } return REGISTRY ; } {code}