JDK-8328263 : JMX Monitor should migrate to storing a Subject, not AccessControlContext
  • Type: Enhancement
  • Component: core-svc
  • Sub-Component: javax.management
  • Priority: P4
  • Status: Closed
  • Resolution: Duplicate
  • Submitted: 2024-03-15
  • Updated: 2024-11-14
  • Resolved: 2024-11-14
Related Reports
Blocks :  
JDK-8326666 - Remove the Java Management Extension (JMX) Subject Delegation feature
Duplicate :  
JDK-8344177 - Remove SecurityManager and related calls from src/java.management
Relates :  
JDK-8296244 - Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs
Description
The JMX "Monitor" stores an AccessControlContext, which is deprecated for removal, so this needs to change.

src/java.management/share/classes/javax/management/monitor/Monitor.java can store a Subject instead.

The current Subject for Monitor execution is set when it is started. 
 test/jdk/javax/management/monitor/ThreadPoolAccTest.java has checks on the Subject and Principal in a Monitor.
Comments
Closing as a duplicate, will make this change as part of the wider java.management cleanup.
14-11-2024