You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@commons.apache.org by "Song Fuchang (Jira)" <ji...@apache.org> on 2022/11/08 14:07:00 UTC

[jira] [Commented] (JEXL-386) Non-inheritable permissions on interfaces are ignored in an inheritable sandbox

    [ https://issues.apache.org/jira/browse/JEXL-386?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630444#comment-17630444 ] 

Song Fuchang commented on JEXL-386:
-----------------------------------

but now I think a non-inheritable permission on an interface may be meaningless? I'm not sure. Any ideas?

> Non-inheritable permissions on interfaces are ignored in an inheritable sandbox
> -------------------------------------------------------------------------------
>
>                 Key: JEXL-386
>                 URL: https://issues.apache.org/jira/browse/JEXL-386
>             Project: Commons JEXL
>          Issue Type: Bug
>    Affects Versions: 3.2.1
>            Reporter: Song Fuchang
>            Priority: Minor
>
> Hello, I found that if I create an inheritable sandbox with:
> {code:java}
> JexlSandbox sandbox = new JexlSandbox(false, true);
> {code}
> and add an non-inheritable permission on an interface:
> {code:java}
> sandbox.permission(SomeInterface.class.getName(), false, true, true, true);
> {code}
> then any object which implemented SomeInterface still gained access to its methods.
> Is this normal?
> I have created a PR on [https://github.com/apache/commons-jexl/pull/140]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)