JDK-8353680 : Release Note: Various Permission Classes Deprecated for Removal
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 25
  • Priority: P4
  • Status: Resolved
  • Resolution: Delivered
  • Submitted: 2025-04-03
  • Updated: 2025-07-02
  • Resolved: 2025-07-02
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 25
25Resolved
Related Reports
Relates :  
JDK-8353641 - Deprecate core library permission classes for removal
Relates :  
JDK-8353642 - Deprecate URL::getPermission method and networking permission classes for removal
Relates :  
JDK-8351310 - Deprecate com.sun.jdi.JDIPermission for removal
Relates :  
JDK-8347985 - Deprecate java.management Permission classes for removal
Relates :  
JDK-8351224 - Deprecate com.sun.tools.attach.AttachPermission for removal
Relates :  
JDK-8353856 - Deprecate FlighRecorderPermission class for removal
Description
The following permission classes have been deprecated for removal:

- `java.security.UnresolvedPermission`
- `javax.net.ssl.SSLPermission`
- `javax.security.auth.AuthPermission`
- `javax.security.auth.PrivateCredentialPermission`
- `javax.security.auth.kerberos.DelegationPermission`
- `javax.security.auth.kerberos.ServicePermission`
- `com.sun.security.jgss.InquireSecContextPermission`
- `java.lang.RuntimePermission`
- `java.lang.reflect.ReflectPermission`
- `java.io.FilePermission`
- `java.io.SerializablePermission`
- `java.nio.file.LinkPermission`
- `java.util.logging.LoggingPermission`
- `java.util.PropertyPermission`
- `jdk.jfr.FlightRecorderPermission`
- `java.net.NetPermission`
- `java.net.URLPermission`
- `jdk.net.NetworkPermission`
- `com.sun.tools.attach.AttachPermission`
- `com.sun.jdi.JDIPermission`
- `java.lang.management.ManagementPermission`
- `javax.management.MBeanPermission`
- `javax.management.MBeanTrustPermission`
- `javax.management.MBeanServerPermission`
- `javax.management.remote.SubjectDelegationPermission`

In addition, the `getPermission` method defined in `java.net.URLConnection` and its subclass `java.net.HttpURLConnection` has been deprecated for removal.

These permission classes and associated methods were only useful in conjunction with the Security Manager, which is no longer supported.
Comments
Adding additional deprecated Permission classes.
02-07-2025
Ok, I added the RN-MultipleLinks label and linked the other deprecation issues. [~dfuchs] Please add the networking permissions and a link to the issue to this RN after you deprecate them for removal.
10-04-2025
Reopen to include other permissions deprecated for removal.
10-04-2025