[jboss-jira] [JBoss JIRA] (JBEE-135) JAXWS SPI Provider should use ServiceLoader within a privileged block

[Alessio Soldano (JIRA)]

    [ https://issues.jboss.org/browse/JBEE-135?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12791132#comment-12791132 ] 

Alessio Soldano commented on JBEE-135:
--------------------------------------

PR: https://github.com/jboss/jboss-jaxws-api_spec/pull/3
                
> JAXWS SPI Provider should use ServiceLoader within a privileged block
> ---------------------------------------------------------------------
>
>                 Key: JBEE-135
>                 URL: https://issues.jboss.org/browse/JBEE-135
>             Project: JBoss JavaEE Spec APIs
>          Issue Type: Bug
>          Components: jboss-jaxws-api
>            Reporter: Alessio Soldano
>            Assignee: Alessio Soldano
>
> The JAXWS SPI Provider uses ServiceLoader to look for user specified provider implementations. The search is performed using the current TCCL.
> When iterating on the ServiceLoader results, read permission on the relevant jar is required. It looks correct to run in a privileged block there, also considering that the user would need a permission for setting/changing the TCCL. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira