8008793: SecurityManager.checkXXX behavior not specified for methods that check AWTPermission and AWT not present

Alan Bateman Alan.Bateman at oracle.com
Mon Feb 25 13:49:05 UTC 2013


On 25/02/2013 13:21, Dmitry Samersoff wrote:
> Alan,
>
> Did you consider to explicitly throw security exception with the message
> like "Permission couldn't be granted because of wrong profile" or
> something like this.
>
> -Dmitry
These checkXXX method should only be called from AWT or other client 
code that already its own dependency on AWT (in which case 
java.awt.AWTPermission will exist. So it's really a corner case for 
these methods to be invoked when AWT is not present so I don't think we 
have to do very much.

-Alan



More information about the security-dev mailing list