PrivilegedAction et al and JEP411
Alan Bateman
Alan.Bateman at oracle.com
Sun Jun 18 12:15:41 UTC 2023
On 18/06/2023 12:52, Peter Firmstone wrote:
>
> Thanks Alan,
>
> Personally, I would hope that nothing happens until after Java 21,
> time is precious, we'll need all the time we can get.
>
> I was hoping, that all privileged actions might be retained
> indefinitely, so that we may instrument them.
>
Once the SM operating mode goes away then I would expect most usages of
privileged actions in the JDK can be removed. Leaving them for an
"authorization layer" to instrument would be misleading. Existing usages
will quickly bit rot. It would also be a tax on all future features and
all ongoing maintenance.
-Alan.
More information about the security-dev
mailing list