JDK-8353680 : Release Note: Various Permission Classes Deprecated for Removal
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 25
  • Priority: P4
  • Status: Resolved
  • Resolution: Delivered
  • Submitted: 2025-04-03
  • Updated: 2025-05-19
  • Resolved: 2025-05-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 25
25Resolved
Related Reports
Relates :  
JDK-8353856 - Deprecate FlighRecorderPermission class for removal
Relates :  
JDK-8353642 - Deprecate URL::getPermission method and networking permission classes for removal
Relates :  
JDK-8353641 - Deprecate core library permission classes for removal
Description
The following permission classes have been deprecated for removal:

- `java.security.UnresolvedPermission`
- `javax.net.ssl.SSLPermission`
- `javax.security.auth.AuthPermission`
- `javax.security.auth.PrivateCredentialPermission`
- `javax.security.auth.kerberos.DelegationPermission`
- `javax.security.auth.kerberos.ServicePermission`
- `com.sun.security.jgss.InquireSecContextPermission`
- `java.lang.RuntimePermission`
- `java.lang.reflect.ReflectPermission`
- `java.io.FilePermission`
- `java.io.SerializablePermission`
- `java.nio.file.LinkPermission`
- `java.util.logging.LoggingPermission`
- `java.util.PropertyPermission`
- `jdk.jfr.FlightRecorderPermission`
- `java.net.NetPermission`
- `java.net.URLPermission`
- `jdk.net.NetworkPermission`

In addition, the `getPermission` method defined in `java.net.URLConnection` and its subclass `java.net.HttpURLConnection` has been deprecated for removal.

These permission classes and associated methods were only useful in conjunction with the Security Manager, which is no longer supported.
Comments
Ok, I added the RN-MultipleLinks label and linked the other deprecation issues. [~dfuchs] Please add the networking permissions and a link to the issue to this RN after you deprecate them for removal.
10-04-2025
Reopen to include other permissions deprecated for removal.
10-04-2025