Logic bug in AccessController.AccHolder.innocuousAcc

2021-06-25 Thread Peter Firmstone
The innocuous AccessControlContext, is intended to have no permission, hence it is constructed using the two argument ProtectionDomain constructor, which causes ProtectionDomain to not consult the Policy. However, if a user obtains this ProtectionDomain and asks the Policy for the ProtectionDo

Re: Logic bug in AccessController.AccHolder.innocuousAcc

2021-06-25 Thread Peter Firmstone
On 26/06/2021 1:48 pm, Peter Firmstone wrote: The innocuous AccessControlContext, is intended to have no permission, hence it is constructed using the two argument ProtectionDomain constructor, which causes ProtectionDomain to not consult the Policy. However, if a user obtains this Protectio