On Wed, 16 Oct 2024 20:51:49 GMT, Sean Mullan <mul...@openjdk.org> wrote:
>> src/jdk.security.jgss/share/classes/com/sun/security/jgss/InquireSecContextPermission.java >> line 31: >> >>> 29: >>> 30: /** >>> 31: * This class is for GSS security context permissions. >> >> Why is the content of _this_ class modified? I see in other permission >> classes the content is left unmodified. > > In general, I tried to remove any text from the Permission classes that > described behavior if the permissions were granted. So in the above I removed > the text because it had words like "protect" and "accessed" and referred to > `com.sun.security.jgss.ExtendedGSSContext#inquireSecContext` which no longer > does a permission check. I also added the API Note to make it clear the > permission could no longer be used to control access. > > If there are other Permission classes you think should have their text > modified or removed, let me know. All JGSS permission classes follow the same style: In `javax.security.auth.kerberos.DelegationPermission`: * This class is used to restrict the usage of the Kerberos * delegation model, ie: forwardable and proxiable tickets. ``` In `javax.security.auth.kerberos.DelegationPermission`: * This class is used to restrict the usage of the Kerberos * delegation model, ie: forwardable and proxiable tickets. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/21498#discussion_r1804590136
