[FELIX-5918] [ConfigAdmin] AccessControlExceptions in ConfigurationAdmin methods

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: configadmin-1.9.4
• Fix Version/s: configadmin-1.9.6
• Component/s: Configuration Admin
• Assignee: Carsten Ziegeler
• Reporter: Christoph Nölle
• Created: 24/Aug/18 21:01
• Updated: 12/Sep/18 12:16
• Resolved: 12/Sep/18 10:15

Description

There are several calls to Bundle#getLocation in the public (API) methods in ConfigurationAdminImpl. When security is enabled these fail with AccessControlException if the caller of these methods does not have AdminPermission ("metadata").

Preferrably the location should be accessed just once in the constructor (wrapped in a privileged block) and stored in a final field.