[Bug classpath/23916] java.security.AccessControlContext forget Subject in Subject.doAs* methods

[sgala at apache dot org]

------- Additional Comments From sgala at apache dot org  2005-09-23 20:05 
-------
Re comment #4:

> ...that is, apply the IntersectingDomainCombiner to the protection domains
after > applying the user-
> specified one.

I think a better solution than my patch (but more difficult to implement with a
quick patch would be as follow:

- the system uses IntersectingDomainCombiner on startup
- If/when JAAS gets initialized, The system starts using the internal
SubjectDomainCombiner instead.
- This will make JAAS happy, while keeping default behavior cleaner.

BTW, I'm not sure the current SubjectDomainCombiner is doing the right thing, I
don't have a clear idea of its expected semantics.

The above strategy could be implemented using
Class.ForName("javax.security.auth.SubjectDomainCombiner") inside
DomainCombiner, and using it if found, instead of the
IntersectingDomainCombiner, which would only be used only if no JAAS
implementation is found (java 1.2 and 1.3)

JAAS in mandatory in 1.4+

-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=23916