db-jdo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Craig L Russell <Craig.Russ...@Sun.COM>
Subject New JDOPermissions
Date Tue, 12 Jun 2007 22:08:45 GMT
Hi,

We have some potentially troublesome methods in JDOImplHelper that  
can affect the way JDO works. Currently, in order to call these  
methods, the caller must have JDOPermission getMetadata.

Is this enough security? If not, we could add a JDOPermission, e.g.  
setEnvironment, to allow the caller to call these methods:

registerDateFormat
registerDocumentBuilderFactory
registerErrorHandler

Is this an issue?

Craig

Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:Craig.Russell@sun.com
P.S. A good JDO? O, Gasp!


Mime
View raw message