We should investigate whether security check performance can be improved if ProtectionDomain.implies first checks its internal (static) permission collection for AllPermission. If it is already present, ProtectionDomain.implies should not consult policy.

This may have an immediate benefit for applet performance since the PluginClassLoader adds AllPermission to the ProtectionDomain's static collection if the applet was signed and trusted.

###@###.### 2005-04-18 18:14:40 GMT

Additionally, the appserver is considering making class loader changes - internal appserver code may be loaded in its own class loader. If that's the case, then potentially such appserver code could be granted AllPermission by the appserver class loader, and therefore may also benefit from this change.



###@###.### 2005-05-24 00:37:39 GMT