You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@felix.apache.org by pa...@apache.org on 2021/11/03 14:04:44 UTC

[felix-dev] 01/01: FELIX-6467: add a permission check to conditional permsion info commit

This is an automated email from the ASF dual-hosted git repository.

pauls pushed a commit to branch issues/FELIX-6467
in repository https://gitbox.apache.org/repos/asf/felix-dev.git

commit 0e862d2b96ba594948552e7b0a7b597f782def4d
Author: Karl Pauls <ka...@gmail.com>
AuthorDate: Wed Nov 3 15:04:31 2021 +0100

    FELIX-6467: add a permission check to conditional permsion info commit
---
 .../security/condpermadmin/ConditionalPermissionAdminImpl.java      | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java b/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
index 9709424..ba6c50f 100644
--- a/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
+++ b/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
@@ -878,6 +878,12 @@ public final class ConditionalPermissionAdminImpl implements
 
             public boolean commit()
             {
+                Object sm = System.getSecurityManager();
+                if (sm != null)
+                {
+                    ((SecurityManager) sm).checkPermission(Permissions.ALL_PERMISSION);
+                }
+
                 synchronized (m_condPermInfos)
                 {
                     if (current.equals(new ArrayList(m_condPermInfos.values())))