RFR: 8351349: GSSUtil.createSubject has outdated access control context and policy related text
Weijun Wang
weijun at openjdk.org
Mon Mar 10 17:58:58 UTC 2025
On Mon, 10 Mar 2025 17:15:00 GMT, Sean Mullan <mullan at openjdk.org> wrote:
> Please review this change to remove outdated access control context and policy related text from the `com.sun.security.jgss.GSSUtil` class which no longer applies now that JEP 486 disabled the Security Manager. I have removed the text and not tried to replace it. I think it is better to keep the method description simple and not assume what a server might do with the subject, such as using it to impersonate a client.
>
> I also made a few other minor changes, adding code tags around class names and changing "Sun Microsystem's" to "the JDK" in the class description.
>
> I will also file a CSR.
Marked as reviewed by weijun (Reviewer).
-------------
PR Review: https://git.openjdk.org/jdk/pull/23970#pullrequestreview-2671795021
More information about the security-dev
mailing list