Details
-
Type:
Improvement
-
Status:
Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 7.0.0pre3
-
Fix Version/s: 6.1.15.rc3
-
Component/s: HTTP
-
Labels:None
-
Number of attachments :
Description
Log.class accesses system properties. This requires a permission. That's
OK for normal deployments, but with custom permissions designs, it can be
problematic.
public class Log {
// ....
private static String
__logClass=System.getProperty("org.mortbay.log.class","org.mortbay.log.Slf4jLog");
private static boolean __verbose =
System.getProperty("VERBOSE",null)!=null;
private static boolean __ignored =
System.getProperty("IGNORED",null)!=null;
// ...
Is there any chance in setting those up in a static initializer block to
allow for simplifying permissions?
AccessController.doPrivileged(new PrivilegedAction<Boolean>() {
public Boolean run()
});
Can you look at this one, as I think it might dove tail with some other tasks coming your way.