glassfishrobot

@wmhopkins Commented True enough -- I just wonder how often there is actually a "challenge" for which this would matter. I've emailed Manfred to get his POV. Either way, this...

@wmhopkins Commented Added "enhancement" label because some of the issues here were bugs (now fixed) but the remaining open items are essentially enhancements.

* **Issue Imported From:** https://github.com/javaee/security-soteria/issues/191 * **Original Issue Raised By:**@dansiviter * **Original Issue Assigned To:** Unassigned

* **Issue Imported From:** https://github.com/javaee/security-soteria/issues/173 * **Original Issue Raised By:**@wmhopkins * **Original Issue Assigned To:** @wmhopkins

@arjantijms Commented I don't fully know what the official TCK rules are, but indeed, to run with a Java SE SecurityManager the necessary extra permissions should be granted. I think...

@wmhopkins Commented The issue isn't so much a question of permissions as a question of coding Soteria properly -- the Glassfish runtime jars should normally have `AllPermission`. I've updated Jaspic.java...

@wmhopkins Commented Re-opening to allow for further investigation -- there are several places where Soteria calls `System.getProperty()`, which will throw a SecurityException if permission not granted. These may need to...

* **Issue Imported From:** https://github.com/javaee/security-soteria/issues/27 * **Original Issue Raised By:**@keilw * **Original Issue Assigned To:** Unassigned

@arjantijms Commented It's indeed an internal class, I'll take a look at an internal package, and maybe split it up a little into smaller semantically more coherent classes.