NEW ISSUE: Security Annotations in generated Component Type

RAISER: Michael Rowley

 

TARGET: SCA Java Common Annotation and API Specification,
section Security Implementation Policy

 

DESCRIPTION:

 

The Security Implementation Policy section describes annotations
for:

@RunAs

@RolesAllowed

@PermitAll

@DenyAll

@DeclareRoles

 

These are described as “policy annotations”, but
the specification never describes how these annotations affect the generated
Component Type for the class, nor how they relate to the policy framework.

 

These annotations are also not present in Chapter 8, which
claims to list all of the annotations.

 

PROPOSAL:

 

None