[FELIX-3950] Permission check being done even when security manager is absent

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: framework-4.2.0
• Fix Version/s: framework-4.2.1
• Component/s: Framework
• Assignee: Karl Pauls
• Reporter: Sanjeeb Kumar Sahoo
• Created: 05/Mar/13 07:33
• Updated: 08/Mar/13 17:03
• Resolved: 08/Mar/13 17:03

Description

I found this code in org/apache/felix/framework/ExtensionManager.java:

if (!((BundleProtectionDomain) bundle.getProtectionDomain()).impliesDirect(new AllPermission()))

{ throw new SecurityException("Extension Bundles must have AllPermission"); }

It's not a problem now, but it can be a problem in some circumastances. I think this check should be done only when sm is present.