Authorization layer API and low level access checks.
Alan Bateman
Alan.Bateman at oracle.com
Wed Jun 23 06:34:23 UTC 2021
On 23/06/2021 04:02, Peter Firmstone wrote:
>
> Note: I'm not sure how to replace an inherited AccessControlContext
> (with a new implementation based on StackWalker functionality) at
> thread creation time, as it must be created when threads are created,
> possibly by using ThreadFactory everywhere, but this doesn't cover all
> threads. How to cater for virtual threads?
>
I don't think the inherited AccessControlContext is widely known or even
clearly specified. In any case, virtual threads do not want to be
burdened with this field. For now they are specified to not support any
permissions. The FJ common pool is another example, the threads don't
have any permissions either (see FJP class description has more on that).
-Alan
More information about the security-dev
mailing list