8008793: SecurityManager.checkXXX behavior not specified for methods that check AWTPermission and AWT not present
Sean Mullan
sean.mullan at oracle.com
Mon Feb 25 15:22:41 UTC 2013
On 02/25/13 07:56, Tom Hawtin wrote:
> On 25/02/2013 12:07, Alan Bateman wrote:
>
>> I would like to change these methods so that they behave as if the
>> permission check fails. I think this is the approach of least-surprise
>> as it's not possible to grant anyone AWTPermission when the permission
>> type does not exist.
>
> That would mean even with a fully trusted acc the permission check would
> fail. Checking AllPermission in that case would make more sense.
Yes, good point, but Alan has corrected that, refresh the webrev.
I just had one comment:
- I think you need to run the test in it's own JVM, since it sets an SM.
--Sean
More information about the security-dev
mailing list