Re: RFR: 8296244: Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs [v3]

Peter Firmstone peter.firmstone at zeus.net.au
Fri Mar 8 08:20:06 UTC 2024


JDK-8267108 doesn't mention any existing getSubject/doAs methods will be 
changed to throw UnsupportedOperationException, would be great if that 
can be documented as well, if I hadn't seen the change in the mailing 
list I would have missed it.   Just helps track related changes.

Thanks,

Peter.


On 8/03/2024 5:52 pm, Alan Bateman wrote:
> On 07/03/2024 23:30, Peter Firmstone wrote:
>> Can this change be documented along with others planned in the new 
>> JEP so these changes are easier to track?
>
> As Sean said, JEP 411 already links to JDK-8267108 that introduced 
> Subject.current/callAs methods as the replacements for getSubject/doAs.
>
> But yes, the future JEP for removal of the security manager will 
> likely cover many areas, including the changes to Subject that are in 
> the API for some time.
>
> -Alan



More information about the security-dev mailing list