So I'm trying to make my security classes compatible with the JDK from a
serialization standpoint and I think there are still problems even with the
new docs.  The serialized form of the public classes are defined, but not
the internal classes.

Let me give you an example.  Permissions are supposed to be serializable. 
PermissionCollection is an abstract class that is also serializable.  To get
the appropriate type of PermissionCollection, you call
newPermissionCollection on the Permission object you want to store in a
collection.  However, the returned classes are not defined anywhere, nor are
they named.  One presumes they are supposed to be serializable as well. 
However, if Sun is returning a SunPermissionCollection and I'm returning a
GnuPermissionCollection, then these won't be compatible with each other if
they are all serialized as part of, say a Permissions object.   I'm guessing
this could be true elsewhere as well.

Any thoughts on this?  Am I missing something or is this a real problem?

-- 
*****************************************************
* Aaron M. Renn                                     *
* Email: [EMAIL PROTECTED]                      *
* Homepage: <URL:http://www.urbanophile.com/arenn/> *
*****************************************************

Reply via email to