In recent versions of JasperReports you added the
static JRClassLoader.setProtectionDomain() function.
This would allow users to assign a custom protection domain to loaded report code. However, this forces the user to use this constructor since the instance of the classloader is not available:
public ProtectionDomain(CodeSource codesource,
PermissionCollection permissions)
the resulting protection domain has static permissions.
I would like to use this constructor:
public ProtectionDomain(CodeSource codesource,
PermissionCollection permissions,
ClassLoader classloader,
Principal[] principals)
to use dynamic permissions (see javadoc).
The attached patch agains Jasper 1.3.3 fixes this.
Thanks!
Recommended Comments