You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@commons.apache.org by "Henri Biestro (Jira)" <ji...@apache.org> on 2022/11/08 19:07:00 UTC
[jira] [Updated] (JEXL-386) Non-inheritable permissions on interfaces are ignored in an inheritable sandbox
[ https://issues.apache.org/jira/browse/JEXL-386?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Henri Biestro updated JEXL-386:
-------------------------------
Assignee: Henri Biestro
> Non-inheritable permissions on interfaces are ignored in an inheritable sandbox
> -------------------------------------------------------------------------------
>
> Key: JEXL-386
> URL: https://issues.apache.org/jira/browse/JEXL-386
> Project: Commons JEXL
> Issue Type: Bug
> Affects Versions: 3.2.1
> Reporter: Song Fuchang
> Assignee: Henri Biestro
> Priority: Minor
>
> Hello, I found that if I create an inheritable sandbox with:
> {code:java}
> JexlSandbox sandbox = new JexlSandbox(false, true);
> {code}
> and add an non-inheritable permission on an interface:
> {code:java}
> sandbox.permission(SomeInterface.class.getName(), false, true, true, true);
> {code}
> then any object which implemented SomeInterface still gained access to its methods.
> Is this normal?
> I have created a PR on [https://github.com/apache/commons-jexl/pull/140]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)