[jbossts-issues] [JBoss JIRA] (JBTM-2076) Add security manager's permission checking in com.arjuna.webservices11.ServiceRegistry#getRegistry

[RH Bugzilla Integration (JIRA)]

    [ https://issues.jboss.org/browse/JBTM-2076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12957751#comment-12957751 ] 

RH Bugzilla Integration commented on JBTM-2076:
-----------------------------------------------

Gytis Trikleris <gtrikler at redhat.com> changed the Status of [bug 1054888|https://bugzilla.redhat.com/show_bug.cgi?id=1054888] from CLOSED to NEW
                
> Add security manager's permission checking in com.arjuna.webservices11.ServiceRegistry#getRegistry
> --------------------------------------------------------------------------------------------------
>
>                 Key: JBTM-2076
>                 URL: https://issues.jboss.org/browse/JBTM-2076
>             Project: JBoss Transaction Manager
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: XTS
>            Reporter: Gytis Trikleris
>            Assignee: Gytis Trikleris
>            Priority: Minor
>             Fix For: 6.0.0
>
>
> Permissions checking in public static methods is needed for Common Criteria certification.
> Add something similar to this at the beginning of the method:
> {code}
> public static ServiceRegistry getRegistry()
> {
>     SecurityManager sm = System.getSecurityManager();
>     if (sm != null) {
>         sm.checkPermission(new RuntimePermission(ServiceRegistry.class.getName() + ".getRegistry"));
>     }
>     return REGISTRY ;
> }
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira