[core-libs] RFR (L): 8010319: Implementation of JEP 181: Nest-Based Access Control

[Alan Bateman]

On 21/05/2018 06:57, David Holmes wrote:
> :
>
>> - I suspect the @throws SecurityException in getNestMembers was 
>> copied from getNestHost as it uses "returned class" (singular). 
>
> It refers to "If any returned class ..." and "that returned class". I 
> don't see any problematic singular uses - can you elaborate please.
I see your point but it's hard to read. An alternative would be to make 
it clear there is a permission check when the nest includes classes 
other than the nest host (rather than "current class").

BTW: Paul brought up the hazard of repeated classes. It it possible to 
have the nest host repeated here? If so then the implementation will do 
a permission check even if there are no other members.

-Alan