PACL

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Completed
• Affects Version/s: 6.1.0 CE GA1, 6.1.10 EE GA1
• Fix Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2
• Component/s: Security
• Labels: None
• Branch Version/s:
  6.1.x
• Backported to Branch:
  Committed
• Epic/Theme:
  • Platform
  • release_planning
• Business Value: 4
• Similar Issues: Show 5 results ; ;

  LPS-33295	PACL - Allow PACL to be totally disabled with no runtime cost
  LPS-33286	PACL - java.security.Policy based PACL implementation (a.k.a. PACLv2)
  LPS-33058	PACL - Rename PACLClassLoaderUtil to ClassLoaderUtil to begin uncluttering the portal of PACL naming
  LPS-33910	Fail to enable PACL
  LPS-33296	PACL - Refactor PortalSecurityManager into an injectable resource

The steps involve adapting the Java SecurityManager to securing plugins.

Phase one prototype was created by Brian. This implementation established File access service access and socket listen and connect.

It was handed to Thomas who worked on File execution permissions.

The next steps will be broken out as sub tasks.

[Tomas Polesovsky]

Updated per Ray's suggestions