JDK-8348967 : Deprecate security permission classes for removal
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2025-01-29
  • Updated: 2025-05-13
  • Resolved: 2025-04-08
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 25
25 b18Fixed
Related Reports
CSR :  
Relates :  
Relates :  
Relates :  
Relates :  
Sub Tasks
JDK-8353680 :  
Description
Now that JEP 486 has been integrated and the Security Manager is permanently disabled, the following permission classes in the security libraries area can be deprecated for removal as they are no longer useful: AuthPermission, DelegationPermission, InquireSecContextPermission, PrivateCredentialPermission, SecurityPermission, ServicePermission, SSLPermission, UnresolvedPermission.

AllPermission is not being deprecated, as it is used outside of the Security Manager framework by some technologies such as JBoss/Wildfly.
Comments
Changeset: 3cbe686d Branch: master Author: Sean Mullan <mullan@openjdk.org> Date: 2025-04-08 16:13:43 +0000 URL: https://git.openjdk.org/jdk/commit/3cbe686d6203043e95604b3d6c96d6ed9d5364c3
08-04-2025

A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/24445 Date: 2025-04-04 12:42:36 +0000
04-04-2025