removal of AccessControlException vs javax.jcr

Sean Mullan sean.mullan at oracle.com
Fri Jan 23 18:00:08 UTC 2026


It hasn't been removed yet, but the plan is to eventually remove it. Why 
is it frozen? Depending on a library or project that isn't active or 
cannot be adapted seems a bit concerning.

--Sean

On 1/23/26 12:18 PM, Julian Reschke wrote:
> Dear JDK security experts!
> 
> I'm mailing as member of the org.apache.jackrabbit PMC and former member 
> of the JSR 283 EG...
> 
> The removal of AccessControlException would break the javax.jcr API 
> which - AFAIU - is completely frozen.
> 
> See
> 
> https://developer.adobe.com/experience-manager/reference-materials/spec/ 
> javax.jcr/javadocs/jcr-2.0/javax/jcr/ 
> Session.html#checkPermission(java.lang.String,java.lang.String)
> 
> Is there anything we can/should do right now?
> 
> Best regards, Julian



More information about the security-dev mailing list