users@jersey.java.net

Re: [Jersey] Using Jersey with Security Manager

From: Paul Sandoz <Paul.Sandoz_at_Sun.COM>
Date: Thu, 05 Jun 2008 10:02:57 +0200

Michael Elman wrote:
> I have just sent some email asking some EE experts...
>
>
> Great! Please keep me updated.
>

We need to do the following:

1) Document the permissions that need to be granted

2) Always use AccessController.doPrivileged, as it means one can grant
    at the class level. It also means that logging (with say the GF
    security manager) may produce more meaningful error messages.

3) Ensure that Jersey integrated with GF has such permissions granted.

Paul.

-- 
| ? + ? = To question
----------------\
    Paul Sandoz
         x38109
+33-4-76188109