Curious to know OpenJDK's plans for removal of
AccessController::doPrivileged calls?
PrivilegedAction shows intent, that an action about to be executed
requires privileges.
Can OpenJDK retain instances of PrivilegedAction and
PrivilegedExceptionAction?
We can find PrivilegedAction::run in stack walks to capture this intent.
We can also instrument the run method, to call our own Authorization
framework.
https://github.com/pfirmstone/HighPerformanceSecurity/blob/main/HPS/src/main/java/au/net/zeus/auth/Authorization.java
https://github.com/opensearch-project/OpenSearch/issues/1687
--
Regards,
Peter
