You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jdo-dev@db.apache.org by Craig L Russell <Cr...@Sun.COM> on 2007/06/13 00:08:45 UTC

New JDOPermissions

Hi,

We have some potentially troublesome methods in JDOImplHelper that  
can affect the way JDO works. Currently, in order to call these  
methods, the caller must have JDOPermission getMetadata.

Is this enough security? If not, we could add a JDOPermission, e.g.  
setEnvironment, to allow the caller to call these methods:

registerDateFormat
registerDocumentBuilderFactory
registerErrorHandler

Is this an issue?

Craig

Craig Russell
Architect, Sun Java Enterprise System http://java.sun.com/products/jdo
408 276-5638 mailto:Craig.Russell@sun.com
P.S. A good JDO? O, Gasp!