blizzard of deprecation warnings related to JEP 411

2021-06-15 Thread Rick Hillegas
Resending this message from the account associated with my security-dev subscription, in the hope that this will bypass moderation: Rory O'Donnell recommended that I bring this issue to the security developers' mailing list. I work on Apache Derby. Derby is one of the applications which receiv

Re: blizzard of deprecation warnings related to JEP 411

2021-06-15 Thread Alan Bateman
On 15/06/2021 15:10, Rick Hillegas wrote: : When I tried to build Derby with the Rampdown Phase One build of open JDK 17 (17-ea+26-2439), I saw many warnings related to the deprecation of Security Manager classes and methods, undoubtedly the consequence of JEP 411 (https://openjdk.java.net/je

Re: blizzard of deprecation warnings related to JEP 411

2021-06-15 Thread Peter Firmstone
Rick, Out of curiosity, does Apache Derby have a need for an Authorization layer? We have tooling to generate our policy files, which simplifies the process a lot, we also have highly scalable and performant SecurityManager and Policy implementations which are compatible with standard Java po

Re: blizzard of deprecation warnings related to JEP 411

2021-06-16 Thread Rick Hillegas
Thanks, Peter. Derby supports a couple authorization mechanisms, the most important one being the role-based SQL Standard GRANT/REVOKE commands (see https://db.apache.org/derby/docs/10.15/security/csecauthorization.html). I'm afraid that my old eyes didn't see a link to your authorization libr

Re: blizzard of deprecation warnings related to JEP 411

2021-06-16 Thread Rick Hillegas
Thanks for that advice, Alan. I have rototilled @SuppressWarnings("removal") annotations across the Derby codebase and thrown more memory at javadoc so that it won't crash on JDK 11. When I run Derby's test suites, I see a blizzard of the following diagnostics:   WARNING: java.lang.System::set

Re: blizzard of deprecation warnings related to JEP 411

2021-06-16 Thread Peter Firmstone
Hi Rick This is dependant on OpenJDK creating hooks in JVM code for existing permission's without depending existing Security infrastructure. The major components can be found here, also available on Maven: https://github.com/pfirmstone/JGDMS/blob/trunk/JGDMS/jgdms-platform/src/main/java/net/

Re: blizzard of deprecation warnings related to JEP 411

2021-06-17 Thread Alan Bateman
On 17/06/2021 00:30, Rick Hillegas wrote: Thanks for that advice, Alan. I have rototilled @SuppressWarnings("removal") annotations across the Derby codebase and thrown more memory at javadoc so that it won't crash on JDK 11. When I run Derby's test suites, I see a blizzard of the following diag

Re: blizzard of deprecation warnings related to JEP 411

2021-06-17 Thread Rick Hillegas
On 6/17/21 4:56 AM, Alan Bateman wrote: On 17/06/2021 00:30, Rick Hillegas wrote: Thanks for that advice, Alan. I have rototilled @SuppressWarnings("removal") annotations across the Derby codebase and thrown more memory at javadoc so that it won't crash on JDK 11. When I run Derby's test suite