[jboss-jira] [JBoss JIRA] Commented: (JBNAME-8) Security Permissions for JNDI sensitive operations

Anil Saldhana (JIRA) jira-events at lists.jboss.org
Fri Sep 26 07:42:21 EDT 2008


    [ https://jira.jboss.org/jira/browse/JBNAME-8?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12431364#action_12431364 ] 

Anil Saldhana commented on JBNAME-8:
------------------------------------

/**
    * The permission required to access lookup
    */
   private static final RuntimePermission getPrincipalInfoPermission =
      new RuntimePermission("org.jboss.naming.lookup");

org.jboss.naming.bind
org.jboss.naming.rebind



> Security Permissions for JNDI sensitive operations
> --------------------------------------------------
>
>                 Key: JBNAME-8
>                 URL: https://jira.jboss.org/jira/browse/JBNAME-8
>             Project: JBoss Naming
>          Issue Type: Task
>          Components: jnpserver
>    Affects Versions: 5.0.0.CR2
>            Reporter: Anil Saldhana
>            Assignee: Scott M Stark
>             Fix For: 5.0.0.GA
>
>
> ctx.rebind is the most critical.
> Please add perms to all JNDI ops.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list