8008793: SecurityManager.checkXXX behavior not specified for methods that check AWTPermission and AWT not present
Tom Hawtin
tom.hawtin at oracle.com
Mon Feb 25 12:56:44 UTC 2013
On 25/02/2013 12:07, Alan Bateman wrote:
> I would like to change these methods so that they behave as if the
> permission check fails. I think this is the approach of least-surprise
> as it's not possible to grant anyone AWTPermission when the permission
> type does not exist.
That would mean even with a fully trusted acc the permission check would
fail. Checking AllPermission in that case would make more sense.
Tom
More information about the security-dev
mailing list