8008793: SecurityManager.checkXXX behavior not specified for methods that check AWTPermission and AWT not present

Sean Mullan sean.mullan at oracle.com
Mon Feb 25 15:22:41 UTC 2013


On 02/25/13 07:56, Tom Hawtin wrote:
> On 25/02/2013 12:07, Alan Bateman wrote:
>
>> I would like to change these methods so that they behave as if the
>> permission check fails. I think this is the approach of least-surprise
>> as it's not possible to grant anyone AWTPermission when the permission
>> type does not exist.
>
> That would mean even with a fully trusted acc the permission check would
> fail. Checking AllPermission in that case would make more sense.

Yes, good point, but Alan has corrected that, refresh the webrev.

I just had one comment:

- I think you need to run the test in it's own JVM, since it sets an SM.

--Sean




More information about the security-dev mailing list