A Bug in AccessControlContext.equals() and hashCode()?
Xiaomin Ding
dingding303 at gmail.com
Thu Jun 26 04:02:24 UTC 2014
>On 6/16/2014 10:40 PM, David M. Lloyd wrote:
>On 06/16/2014 09:19 AM, Frank Ding wrote:
>> Hi Jeff,
>> Thanks for your reply. One further question is that you confirmed
>> that two AccessControlContext objects considered equal via method
>> equals() should return same results for
>> AccessControlContext.checkPermission() but test shows that 2
>> AccessControlContext objects are equal regardless of isLimited,
>> limitedContext, parent, permissions, or privilegedContext. Does it make
>> sense and apply to Java 8 AccessControlContext with JEP140?
>
>Is it not true that a limited privileged context simply adds a
>protection domain that restricts permissions to the limited set? This
>seems to be the "obvious" implementation of the feature.
>
>If so, then equals() should have taken it into account as a matter of
>course.
>--
>- DML
Hi Jeff,
Could you pls let us know your insight?
Regards,
Frank
More information about the security-dev
mailing list