Re: RFR: 8296244: Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs [v3]

Alan Bateman Alan.Bateman at oracle.com
Fri Mar 8 07:52:15 UTC 2024


On 07/03/2024 23:30, Peter Firmstone wrote:
> Can this change be documented along with others planned in the new JEP 
> so these changes are easier to track?

As Sean said, JEP 411 already links to JDK-8267108 that introduced 
Subject.current/callAs methods as the replacements for getSubject/doAs.

But yes, the future JEP for removal of the security manager will likely 
cover many areas, including the changes to Subject that are in the API 
for some time.

-Alan



More information about the security-dev mailing list