[jboss-jira] [JBoss JIRA] (JBEE-135) JAXWS SPI Provider should use ServiceLoader within a privileged block

[Alessio Soldano (JIRA)]

Alessio Soldano created JBEE-135:
------------------------------------

             Summary: JAXWS SPI Provider should use ServiceLoader within a privileged block
                 Key: JBEE-135
                 URL: https://issues.jboss.org/browse/JBEE-135
             Project: JBoss JavaEE Spec APIs
          Issue Type: Bug
          Components: jboss-jaxws-api
            Reporter: Alessio Soldano
            Assignee: Alessio Soldano


The JAXWS SPI Provider uses ServiceLoader to look for user specified provider implementations. The search is performed using the current TCCL.
When iterating on the ServiceLoader results, read permission on the relevant jar is required. It looks correct to run in a privileged block there, also considering that the user would need a permission for setting/changing the TCCL. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira