JDK-8327618 : RMIConnectionImpl should remove AccessControlContext and JMXSubjectDomainCombiner usage.
  • Type: Enhancement
  • Component: core-svc
  • Sub-Component: javax.management
  • Priority: P3
  • Status: Open
  • Resolution: Unresolved
  • Submitted: 2024-03-07
  • Updated: 2024-05-30
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 24
24Unresolved
Related Reports
Blocks :  
JDK-8326666 - Remove the Java Management Extension (JMX) Subject Delegation feature
Relates :  
JDK-8296244 - Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs
Description
JMX RMIConnectionImpl (src/java.management.rmi/share/classes/javax/management/remote/rmi/RMIConnectionImpl.java) uses APIs deprecated for removal as part of JEP 411.

It already has the authenticated Subject, if any, and with the removal of Subject Delegation we should be able to remove JMXSubjectDomainCombiner and use of AccessControlContext.