[
https://issues.apache.org/jira/browse/DERBY-7110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17363982#comment-17363982
]
Richard N. Hillegas commented on DERBY-7110:
--------------------------------------------
Hey Bryan,
You have put your finger on the issue which is troubling me: What should we do
to mimic the capabilities of Java permissions after the SecurityManager goes
away? There are a couple frustrations bundled together here:
1) No-one can say when the SecurityManager will disappear. The Java team has
merely expressed their belief that the SecurityManager is insupportably hard to
maintain over the long term.
2) No-one can say what (if anything) will replace the SecurityManager.
Given this vagueness, I have no appetite for ripping out our extensive
permissions checks. As you note, they are a powerful mechanism for securing
Derby installations, even if they are hard to use. It seems to me that we have
to wait and see--and hope that a replacement security mechanism appears long
before the SecurityManager disappears.
Here is the complete text of Alan's response:
"Yes, JEP 411 deprecates a number of APIs for future removal. There probably
isn't much to do right now except to be aware that the APIs are earmarked for
removal in some future release. I've no doubt there will be another JEP when
that time comes. I assume you know about @SuppressWarnings("removal"), which
you can use to suppress the warnings for now. The JDK usages of these APIs are
using SuppressWarnings as the JDK is compiled with -Xlint set to made warnings
fatal."
That's all I know.
> Make it possible to build and test Derby cleanly with OpenJDK 17
> ----------------------------------------------------------------
>
> Key: DERBY-7110
> URL: https://issues.apache.org/jira/browse/DERBY-7110
> Project: Derby
> Issue Type: Task
> Components: Build tools
> Affects Versions: 10.16.0.0
> Reporter: Richard N. Hillegas
> Assignee: Richard N. Hillegas
> Priority: Major
> Attachments: derby-7110-01-aa-removeAngleBrackets.diff
>
>
> Releases of Open JDK 17 can be found at https://jdk.java.net/17/. We should
> adjust Derby as necessary so that it builds cleanly (including javadoc) and
> tests cleanly with this version of the platform.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
