Authorization layer API and low level access checks.

Alan Bateman Alan.Bateman at oracle.com
Wed Jun 23 06:34:23 UTC 2021


On 23/06/2021 04:02, Peter Firmstone wrote:
>
> Note: I'm not sure how to replace an inherited AccessControlContext 
> (with a new implementation based on StackWalker functionality) at 
> thread creation time, as it must be created when threads are created, 
> possibly by using ThreadFactory everywhere, but this doesn't cover all 
> threads. How to cater for virtual threads?
>
I don't think the inherited AccessControlContext is widely known or even 
clearly specified. In any case, virtual threads do not want to be 
burdened with this field. For now they are specified to not support any 
permissions. The FJ common pool is another example, the threads don't 
have any permissions either (see FJP class description has more on that).

-Alan



More information about the security-dev mailing list