SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 72

changes.mady.by.user Carol J. Lallier

Saved on

compared with

New Version 73

changes.mady.by.user Carol J. Lallier

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The default SecurityManager checks whether the caller of a particular method has sufficient permissions to proceed with an action. An action is a level of access; for instance, the actions for java.io.FilePermission are read, write, execute, and delete [API 2011]. The "Permission Descriptions and Risks" guide [Oracle 2008b] enumerates the default permissions and the risks associated with granting these permissions to Java code.

...

MITRE CWECWE-732, Incorrect permission assignment for critical resource

Bibliography

2012c Java 7 2008b the Java™ 6
[API 2011]Class FilePermission
Class SecurityManager
[Oaks 2001]Chapter 5, "The Access Controller," "Permissions"
[Oracle 2008b]Permissions in the Java™ SE 6 Development Kit (JDK)
[Oracle 2012c]Permissions in Java SE 7 Development Kit (JDK)
[Policy 2002]"Permission Descriptions and Risks"

...