[
https://issues.apache.org/jira/browse/JEXL-386?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Henri Biestro resolved JEXL-386.
--------------------------------
Resolution: Fixed
https://github.com/apache/commons-jexl/commit/535e621d827a68e17e274fa34b6cbd7b24ecdccd
> Non-inheritable permissions on interfaces are ignored in an inheritable
> sandbox
> -------------------------------------------------------------------------------
>
> Key: JEXL-386
> URL: https://issues.apache.org/jira/browse/JEXL-386
> Project: Commons JEXL
> Issue Type: Bug
> Affects Versions: 3.2.1
> Reporter: Song Fuchang
> Assignee: Henri Biestro
> Priority: Minor
> Fix For: 3.3
>
>
> Hello, I found that if I create an inheritable sandbox with:
> {code:java}
> JexlSandbox sandbox = new JexlSandbox(false, true);
> {code}
> and add an non-inheritable permission on an interface:
> {code:java}
> sandbox.permission(SomeInterface.class.getName(), false, true, true, true);
> {code}
> then any object which implemented SomeInterface still gained access to its
> methods.
> Is this normal?
> I have created a PR on [https://github.com/apache/commons-jexl/pull/140]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
