Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
1.1.0
-
None
Description
A problem has been reported with 1.1 by Aaron Bruegl on 6/6/06. An AccessControlException is being thrown in an applet invoked from javascript even when the logging lib has been signed and granted permissions.
LogFactoryImpl.java:1250 in the 1.1 release has this line:
// try the parent classloader
currentCL = currentCL.getParent();
which does seem to be a likely cause for the exception.
This code should be executed under an AccessController, so that granting the logging jar the appropriate permissions can fix the problem; without this, all calling code also needs to have that permission.
Maybe we should wrap method discoverLogImplementation in an AccessController, covering all cases like this?