[jira] Commented: (RIVER-26) Make UmbrellaGrantPermission work with DynamicPolicy

["Peter Firmstone (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/RIVER-26?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12885940#action_12885940 ] 

Peter Firmstone commented on RIVER-26:
--------------------------------------

It would appear that this is a desirable feature for a RevokeableDynamicPolicy, which in order to allow Permission's to be Revoked, must not return dynamic grants via Policy.getPermissions(ProtectionDomain), lest they become merged with the ProtectionDomain's private Permissions, PermissionCollection.

A RevokeableDyanamicPolicy must rely on an underlying file based policy, to provide an initial set of Permission's, the utilisation of UmbrellaGrantPermission will minimise the number of Permission's that must be granted by the underlying file based policy and thus increasing the scope of Permission's able to be revoked, also minimising the penalty of the redundant implies call made to the ProtectionDomain's own Permissions after checking the Policy.

This feature has been added to ConcurrentDynamicPolicyProvider, pending testing, it will be committed shortly.

See also River-323

> Make UmbrellaGrantPermission work with DynamicPolicy
> ----------------------------------------------------
>
>                 Key: RIVER-26
>                 URL: https://issues.apache.org/jira/browse/RIVER-26
>             Project: River
>          Issue Type: Improvement
>          Components: net_jini_security
>    Affects Versions: jtsk_2.1
>            Reporter: Mark Brouwer
>            Priority: Minor
>
> {{net.jini.security.policy.UmbrellaGrantPermission}} is only applicable to {{net.jini.security.policy.PolicyFileProvider}}, see http://archives.java.sun.com/cgi-bin/wa?A2=ind0607&L=jini-users&F=&S=&P=14665 for more detailed information.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.