I have heard discussions about removing security manager integration from the EE specifications. That is something I think is a great idea even before the talk to remove the SecurityManager from Java, just not being done for EE 10.
Regardless, I'm not sure why a discussion about a bug fix in a compatible implementation is the focus here. That is up to the discretion of the implementation project.
As a broader Java community, I am not looking forward to when Java removes AccessController::doPrivileged altogether. The JEP says:
<quote>
In Java 18 and later, we will degrade other Security Manager APIs so that they remain in place but with limited or no functionality. For example, we may revise AccessController::doPrivileged simply to run the given action, or revise System::getSecurityManager
always to return null. This will allow libraries that support the Security Manager and were compiled against previous Java releases to continue to work without change or even recompilation. We expect to remove the APIs once the compatibility risk of doing
so declines to an acceptable level.
</quote>
To be honest, I cannot predict how long it will take for the compatibility risk to decline to an acceptable level. But it will trigger millions upon millions of lines of code to have to change simply so the JVM can remove a no-op doPrivileged method. I sure
hope that win is worth it to the whole Java community.
Tom
Hi,
I know, but isn't that just delaying the inevitable? I mean, with some tricks you can still run applets today (sorry for coming up with applets all the time), but it doesn't mean one should, or that anyone should seriously support this.
All I'm really saying is that we had a ton of issues with crossing the JDK 8 to JDK 11 barrier, since despite that we all knew modules were coming, almost nobody prepared.
Now we know the security manager is going to disappear. So shouldn't we prepare for it, so that by the time it's really gone, we won't need half a decade or more to get our users passed JDK 17?
Kind regards,
Arjan
_______________________________________________