axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rich Scheuerle (JIRA)" <j...@apache.org>
Subject [jira] Created: (AXIS2-3650) Need a scrub for J2S doPriv
Date Sat, 22 Mar 2008 13:53:24 GMT
Need a scrub for J2S doPriv
---------------------------

                 Key: AXIS2-3650
                 URL: https://issues.apache.org/jira/browse/AXIS2-3650
             Project: Axis 2.0 (Axis2)
          Issue Type: Bug
            Reporter: Rich Scheuerle
            Assignee: Davanum Srinivas
             Fix For: 1.4


Friendly reminder to add "doPriv" calls to your code as necessary.   Especially new code.

Lack of doPrivs leads to problems in enterprise environments.

-------------------------------------------------------------
As a refresher...doPrivs are needed for:
Accessing the classloader
Loading a class via Class.forName
Method.invoke
Calls to get system properties
Calls to external projects that do the above.

Also make sure to put the doPriv calls in areas that the customer cannot directly call.  
(For example don't expose a public Class forNameWithPriv(String name) method).

Perhaps we should add this as a "release step"

Dims volunteered to do a quick scrub prior to 1.4 release.  Thanks dims.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


Mime
View raw message