Uploaded image for project: 'Remoting JMX'
  1. Remoting JMX
  2. REMJMX-69

ServerProxy's internal calls to MBeanServer.getClassLoader(For)() should be in a privileged block

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Done
    • Major
    • 1.1.1.Final, 2.0.0.CR2
    • 2.0.0.CR1
    • None
    • None

    Description

      SetAttribute(s)Handler, InvokeHandler and CreateMBeanHandler call MBeanServer.getClassLoader() and MBeanServer.getClassLoaderFor() to set the correct classloder before invoking the 'real' methods on the MBeanServer. For WildFly's rbac implementation, these getClassLoader(For) methods are very strict only allowing superuser or administrator to call them. Since the function of these calls is internal for setAttribute(s), invoke, createMBean() the subject should be cleared, allowing them to be called in this 'internal' fashion.

      Attachments

        Activity

          People

            darran.lofthouse@redhat.com Darran Lofthouse
            kkhan1@redhat.com Kabir Khan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: