-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 1.4.1, 1.6.0, 1.5.2
-
Component/s: None
-
Labels:None
-
Story Points:1
-
Epic Link:
The permissions granted to apps by default are too coarse-grained and excessive.
It seems like OSGI's AdaptPermission ("adaptClass=org.osgi.framework.wiring.BundleRevision", adapt), which is required to enable slf4j logging, is the only permission that should be granted to apps by default.