Remove Security Manager Dependency Across Platform

[m-reza-rahman]

Since Jakarta EE 12 will likely support Java SE 21 and Java SE 25, it is necessary to remove any dependency on the Java SE Security Manager across the platform and all specifications. The Security Manager cannot be enabled by Java SE 24. The thought is that in Java 29, SecurityManager APIs may not exist or may throw an error. It looks like some of this work was done in EE 11, but not all. As an example of pending work, see: jakartaee/cdi#831.

Specification issues

• Connectors: Connector Permissions feature connectors#148

API update issues

• Activation (issue and PR)
• Batch (issue and PR)
• CDI (issue and PR)
• JSON-P (issue and PR)
• Mail (issue and PR)
• Persistence (issue and PR)
• REST (issue and PR)
• Servlet (issue and PR) (just a javadoc update)
• Validation (issue and PR) (changes could be done in a service release since 3.1 was new in EE 11)

[gurunrao]

Specification issues:

• Rest:Remove SecurityManager usage and references rest#1262
• CDI:Remove support for Security Manager cdi#831
• Persistence: Drop the use of SecurityManager persistence#666
• Connector: Connector Permissions feature connectors#148

discussion Threads:

• https://www.eclipse.org/lists/jakartaee-platform-dev/threads.html#04575
• https://www.eclipse.org/lists/jakartaee-platform-dev/threads.html#04566

[jhanders34]

I have updated the description with a link to all issues in the component specifications and PRs that address the API changes to remove references to the SecurityManager in the APIs. I have marked the check box for those that have had the PR merged.