Re: Security issue with generated classes

Hi Craig, > I looked at the datanucleus implementation and found that I'm totally > not qualified to propose a patch. I found the code that needs to be > changed in org/datanucleus/enhancer/bcel/method/ > JdoReplaceStateManager.java and org/datanucleus/enhancer/asm/method/ > JdoReplaceStateManager

Re: Security issue with generated classes

I looked at the datanucleus implementation and found that I'm totally not qualified to propose a patch. I found the code that needs to be changed in org/datanucleus/enhancer/bcel/method/ JdoReplaceStateManager.java and org/datanucleus/enhancer/asm/method/ JdoReplaceStateManager.java but that'

Re: Security issue with generated classes

I looked at this issue in some more detail and found that the root cause was fixed some time ago (before 1.0.1). The persistence-capable classes should not call SecurityManager directly, but instead call the static method JDOImplHelper.checkAuthorizedStateManager with the StateManager as th