[ http://issues.apache.org/jira/browse/FELIX-150?page=all ]
Karl Pauls reassigned FELIX-150:
--------------------------------
Assignee: Karl Pauls
> Bundle.getResource does not check for AdminPermission, like getResources does.
> ------------------------------------------------------------------------------
>
> Key: FELIX-150
> URL: http://issues.apache.org/jira/browse/FELIX-150
> Project: Felix
> Issue Type: Bug
> Components: Framework
> Reporter: Olivier Gruber
> Assigned To: Karl Pauls
> Priority: Minor
>
> Both getResource and getResources on Bundle should return null if the caller
> does not have the appropriate AdminPermission[this,RESOURCE]
> This is tested in getResources, which is not implemented otherwise, but left
> unchecked in getResource().
> Missing code (copied from BundleImpl.getResources()):
> Object sm = System.getSecurityManager();
> if (sm != null)
> {
> try
> {
> ((SecurityManager) sm).checkPermission(new
> AdminPermission(this,
> AdminPermission.RESOURCE));
> }
> catch (Exception e)
> {
> return null; // No permission
> }
> }
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
