commit 5fbac03d642dcb521e80d4178a89974638467841
author Karl Pauls <pauls@apache.org> Thu Mar 06 23:45:13 2008 +0000
committer Karl Pauls <pauls@apache.org> Thu Mar 06 23:45:13 2008 +0000
tree 62161dc60f0929ddf62bba443505f46bef7167fb
parent 41db639ff7c645434c5479bb3d15602895d8e29e

Bundle.getResource does not check for AdminPermission, like getResources does. This adds the permission check. (FELIX-150)

git-svn-id: https://svn.apache.org/repos/asf/felix/trunk@634459 13f79535-47bb-0310-9956-ffa450edef68

framework/src/main/java/org/apache/felix/framework/BundleImpl.java

diff --git a/framework/src/main/java/org/apache/felix/framework/BundleImpl.java b/framework/src/main/java/org/apache/felix/framework/BundleImpl.java
index 3cd685a..4b835b0 100644
--- a/framework/src/main/java/org/apache/felix/framework/BundleImpl.java
+++ b/framework/src/main/java/org/apache/felix/framework/BundleImpl.java
@@ -167,6 +167,21 @@
     **/
     public URL getResource(String name)
     {
+        Object sm = System.getSecurityManager();
+
+        if (sm != null)
+        {
+            try
+            {
+                ((SecurityManager) sm).checkPermission(new AdminPermission(this,
+                    AdminPermission.RESOURCE));
+            }
+            catch (Exception e)
+            {
+                return null; // No permission
+            }
+        }
+
         return m_felix.getBundleResource(this, name);
     }