Hi everyone, 

I am currently looking into building/running our application with the upcoming 
Java 24 (and later Java 25), and I encountered a compatibility issue regarding 
the JCR API (javax.jcr). 

The Issue: With JEP 486 (Permanently Disable the Security Manager), Java 24 has 
removed several security-related classes, including 
java.security.AccessControlException. 

However, the javax.jcr.Session interface declares this exception in its method 
signatures, for example: 
Java 

public void checkPermission(String absPath, String actions) throws 
AccessControlException, RepositoryException; 

Since AccessControlException no longer exists in the JDK starting with version 
24, code compiling against the standard javax.jcr dependency fails. 

My Question: Are there any plans to release an updated version of the JCR API 
(perhaps a Jakarta or revised javax artifact) that removes this exception from 
the method signatures or replaces it with java.lang.SecurityException? 

How should projects currently relying on Jackrabbit and the standard JCR API 
proceed if they want to support Java 24+? 

Thanks for your help! 

Best, 

Korbinian

Reply via email to