[jboss-jira] [JBoss JIRA] Closed: (JBMICROCONT-103) Direct system properties access org.jboss.config.plugins.property.PropertyConfiguration

[Adrian Brock (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBMICROCONT-103?page=all ]

Adrian Brock closed JBMICROCONT-103.
------------------------------------

    Resolution: Rejected

That is not correct. 

The java security system will also use the caller of 
the constructor's permissions
when considering whether the System.getProperties()
works.

The access to system properties is not in a privileged block.

> Direct system properties access org.jboss.config.plugins.property.PropertyConfiguration
> ---------------------------------------------------------------------------------------
>
>                 Key: JBMICROCONT-103
>                 URL: http://jira.jboss.com/jira/browse/JBMICROCONT-103
>             Project: JBoss MicroContainer
>          Issue Type: Bug
>          Components: Configurator
>            Reporter: Rashid Kamran
>            Priority: Minor
>
> PropertyConfiguration's constructor is not considering the check access before accessing system properties, this means at a bootstrap level by passing a null as parameter is equivalent to access the System.getProperties() without SecurityManager's involvement.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira