Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-2440

Thread pool AccessControlContext Propagation

    XMLWordPrintable

Details

    • Task
    • Resolution: Unresolved
    • Major
    • None
    • None
    • None
    • None

    Description

      A decision was made within Java that newly created threads should inherit the access control context of their creator.

      In general this was justified on the basis that if you are creating a thread you want it to inherit the permissions you already have.

      Once we introduce thread pooling that logic no longer makes as much sense and there is not the same relationship between the thread that triggers it's creation and the long term life of that thread.

      This may affect components outside of WildFly but I am raising it here as a top level task.

      Should also note that JBoss Threads does already have some protection built in if a security manager is in use but there are times the AccessControlContext will be used without a security manager so more control is required.

      Attachments

        Activity

          People

            Unassigned Unassigned
            darran.lofthouse@redhat.com Darran Lofthouse
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: