On Jun 26, 2009, at 3:24 AM, Gurkan Erdogdu wrote:

In code base, several classes use thread context class loader via calling
getContextClassLoader method (For Example : In ServicePool class uses
Thread.currentThread().getContextClassLoader(); ) without checking Security
Manager

Is it necessary to call this method within Priviledge Action?

We aren't capable of running with a Security Manager installed, mostly due to third party libs. , so it's not really required currently. If there isn't much overhead to doing the call we can certainly add the doPrivilaged syntax.

And moreover,
what happens if this method returns null ?

Can that method return null?

PS : Sorry for my questions if it seems stupid. I just try to understand the
internal of the code base.

No, questions are great. They help everyone understand the code better, not just you. I love it when there's someone new on the project and they start asking all sorts of questions. Usually brings out some good information and potential documentation. Ask away!


-David




Reply via email to