Bug 44251

Critical

GemStone/S 64 Bit

3.2

logins from GBS

3.2.1

CodeModification privilege required for GBS operations

In v3.2, CodeModification privilege is required to flush any bag, set,
or dictionary from GBS to the gem. GBS sessions that are logged in as users
that do not have CodeModification privilege will encounter SecurityErrors
when performing operations such as updating bags that should not require
privileges.

The problem is that System class >> _processDeferredGciUpdates, which is
invoked by the store traversal, initializes internal state to an instance
of GsMethodDictionary.

Workaround

If you are impacted by this problem, contact GemTalk Technical Support
to discuss the possible workarounds and security implications of the workarounds.


Last updated: 5/19/14