JDK-8190868 : Mark the deprecated java.security.acl APIs with forRemoval=true
  • Type: CSR
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Closed
  • Resolution: Approved
  • Fix Versions: 10
  • Submitted: 2017-11-07
  • Updated: 2017-11-13
  • Resolved: 2017-11-11
Related Reports
CSR :  
Relates :  

Mark the deprecated java.security.acl APIs with forRemoval=true.


The APIs in java.security.acl were deprecated in JDK 9 but have had the following warning in the package description for a very long time: 

"The classes and interfaces in this package have been superseded by classes in the java.security package. See that package and, for example, java.security.Permission for details."

Since there have been suitable replacements since JDK 1.2, there is no reason to retain this package and it should be removed in a future release.


Mark the deprecated java.security.acl APIs with forRemoval=true.


Make the following change to the java.security.{Acl, AclEntry, AclNotFoundException, Group, LastOwnerException, NotOwnerException, Owner, Permission} classes:

    +@Deprecated(since="9", forRemoval=true)
Follow-up bug to remove APIs filed, see https://bugs.openjdk.java.net/browse/JDK-8191138

PS Please file the follow-up bug to remove the API and move to a subtask of the appropriate umbrella issue, JDK-8177680 for JDK 11.

Moving to approved.