Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-16 Thread Peter Firmstone
Although JGDMS is a different type of system, this is one of the functions of SecurityManager in our system also. We have methods equivalent to Subject.doAs, which instead of injecting the privileges of the user into all ProtectionDomain's, instead prepends a ProtectionDomain that represents t

Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-16 Thread David Black
Hi Ron On Thu, 13 May 2021 at 20:22, Ron Pressler wrote: > > > > > On 13 May 2021, at 03:11, David Black wrote: > > > > > > This seems somewhat more useful than 1 & 2 but imho it would be better to > > be able to perform checks/grant access on a call stack basis. > > This is an important point