[jboss-jira] [JBoss JIRA] Created: (JBVFS-79) VFSPermission should imply a FilePermission

[Anil Saldhana (JIRA)]

VFSPermission should imply a FilePermission
-------------------------------------------

                 Key: JBVFS-79
                 URL: https://jira.jboss.org/jira/browse/JBVFS-79
             Project: JBoss VFS
          Issue Type: Sub-task
      Security Level: Public (Everyone can see)
            Reporter: Anil Saldhana


Adrian says:
==============================
vfs permissions implying other permissions. e.g. permission to
vfsfile:/something/in/my/codesource
should imply 
http://java.sun.com/j2se/1.4.2/docs/api/java/security/Permission.html#implies(java.security.Permission)
permission to file:/something/in/my/codesource 
and using the java.io.File api to access it.

see for example FileURLConnection

   /** 
    * Return a permission for reading of the file
    */
   public Permission getPermission() throws IOException
   {
      return new FilePermission(file.getPath(), "read");
   }

This is also important for making sure you can't use vfs urls
to open connections to things you are not allowed to access.
Although I think in that case, the actual vfs implementation
code will barf later if you don't have the permission?
===========================================


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira