[
https://issues.apache.org/jira/browse/JDO-555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12613526#action_12613526
]
Andy Jefferson commented on JDO-555:
------------------------------------
Craig,
I know I didn't include your patch as-is. I put AccessController around the
calls to ClassMetaData/InterfaceMetaData.populate() which definitely uses
reflection. Putting it around that block you selected would not have caught
initialisation from persistence.xml etc (hence calls to reflective methods).
So my question is, what other DataNucleus call needs AccessController around it
? Is it ClassMetaData/InterfaceMetaData.initialise() ?
> All calls to Class.getMethod and Method.invoke (among others) need to be
> invoked inside a doPrivileged block.
> -------------------------------------------------------------------------------------------------------------
>
> Key: JDO-555
> URL: https://issues.apache.org/jira/browse/JDO-555
> Project: JDO
> Issue Type: Bug
> Components: api2, api2-legacy
> Affects Versions: JDO 2 maintenance release 1
> Reporter: Matthew T. Adams
> Assignee: Andy Jefferson
> Fix For: JDO 2 maintenance release 2
>
> Attachments: datanucleus.patch, datanucleus.patch, jdo-555.patch,
> jdo-555.patch, jdo-555.patch, xmlbean.patch
>
>
> Discovered in review of patch to JDO-545.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
