Remove duplicate permissions

Signed-off-by: Andrey Pleskach <[email protected]>
willyborankin · Nov 13, 2023 · 0f6e54f · 0f6e54f
1 parent 9329d00
commit 0f6e54f
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/plugin-security.policy b/plugin-security.policy
@@ -34,6 +34,8 @@ grant {
   permission javax.security.auth.AuthPermission "modifyPrivateCredentials";
   permission javax.security.auth.AuthPermission "doAs";
   permission javax.security.auth.kerberos.ServicePermission "*","accept";
+
+  //SAML and internal plugin policy
   permission java.util.PropertyPermission "*","read,write";
 
   //Enable when we switch to UnboundID LDAP SDK
@@ -59,7 +61,6 @@ grant {
   permission java.security.SecurityPermission "putProviderProperty.BC";
   permission java.security.SecurityPermission "insertProvider.BC";
   permission java.security.SecurityPermission "removeProviderProperty.BC";
-  permission java.util.PropertyPermission "jdk.tls.rejectClientInitiatedRenegotiation", "write";
   permission java.security.SecurityPermission "getProperty.org.bouncycastle.rsa.max_size";
   permission java.security.SecurityPermission "getProperty.org.bouncycastle.rsa.max_mr_tests";
 
@@ -75,9 +76,6 @@ grant {
   //Enable this permission to debug unauthorized de-serialization attempt
   //permission java.io.SerializablePermission "enableSubstitution";
 
-  //SAML policy
-  permission java.util.PropertyPermission "*", "read,write";
-
 };
 
 grant codeBase "${codebase.netty-common}" {