SAML 4.3.0 addition persmission

Added addition permissions for new version of SAML. Signed-off-by: Andrey Pleskach <[email protected]>
opensearch-project · Jul 11, 2023 · 1d44bde · 1d44bde
1 parent e5348eb
commit 1d44bde
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/plugin-security.policy b/plugin-security.policy
@@ -60,7 +60,6 @@ grant {
   permission java.security.SecurityPermission "putProviderProperty.BC";
   permission java.security.SecurityPermission "insertProvider.BC";
   permission java.security.SecurityPermission "removeProviderProperty.BC";
-  permission java.util.PropertyPermission "jdk.tls.rejectClientInitiatedRenegotiation", "write";
 
   permission java.lang.RuntimePermission "accessUserInformation";
 
@@ -74,6 +73,9 @@ grant {
 
   //Enable this permission to debug unauthorized de-serialization attempt
   //permission java.io.SerializablePermission "enableSubstitution";
+
+  //SAML policy
+  permission java.util.PropertyPermission "*" "read,write";
 };
 
 grant codeBase "${codebase.netty-common}" {