8008793: SecurityManager.checkXXX behavior not specified for methods that check AWTPermission and AWT not present

Tom Hawtin tom.hawtin at oracle.com
Mon Feb 25 12:56:44 UTC 2013


On 25/02/2013 12:07, Alan Bateman wrote:

> I would like to change these methods so that they behave as if the
> permission check fails. I think this is the approach of least-surprise
> as it's not possible to grant anyone AWTPermission when the permission
> type does not exist.

That would mean even with a fully trusted acc the permission check would 
fail. Checking AllPermission in that case would make more sense.

Tom



More information about the security-dev mailing list