[felix-dev] branch master updated: FELIX-6467: add a permission check to conditional permsion info commit (#113)

[pauls]

This is an automated email from the ASF dual-hosted git repository.

pauls pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/felix-dev.git


The following commit(s) were added to refs/heads/master by this push:
     new e92f67c  FELIX-6467: add a permission check to conditional permsion 
info commit (#113)
e92f67c is described below

commit e92f67c90e310aa3d4326f24a28e7ebc59073fac
Author: Karl Pauls <pa...@apache.org>
AuthorDate: Wed Nov 3 15:05:07 2021 +0100

    FELIX-6467: add a permission check to conditional permsion info commit 
(#113)
---
 .../security/condpermadmin/ConditionalPermissionAdminImpl.java      | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git 
a/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
 
b/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
index 9709424..ba6c50f 100644
--- 
a/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
+++ 
b/framework.security/src/main/java/org/apache/felix/framework/security/condpermadmin/ConditionalPermissionAdminImpl.java
@@ -878,6 +878,12 @@ public final class ConditionalPermissionAdminImpl 
implements
 
             public boolean commit()
             {
+                Object sm = System.getSecurityManager();
+                if (sm != null)
+                {
+                    ((SecurityManager) 
sm).checkPermission(Permissions.ALL_PERMISSION);
+                }
+
                 synchronized (m_condPermInfos)
                 {
                     if (current.equals(new 
ArrayList(m_condPermInfos.values())))