From 339c30320af03e80c36dd878c53cce0a946865b2 Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Mon, 17 Oct 2022 10:14:51 +0200
Subject: [PATCH] WW-2815 Drops clearing existing permissions to avoid messing
 with user provided configuration

---
 .../java/org/apache/struts2/rest/handler/XStreamHandler.java   | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
index 5958ff5c9..d4d40221d 100644
--- a/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
+++ b/plugins/rest/src/main/java/org/apache/struts2/rest/handler/XStreamHandler.java
@@ -72,9 +72,6 @@ public class XStreamHandler extends AbstractContentTypeHandler {
             stream = new XStream(new StaxDriver());
         }
 
-        LOG.debug("Clears existing permissions");
-        stream.addPermission(NoTypePermission.NONE);
-
         LOG.debug("Adds per action permissions");
         addPerActionPermission(invocation, stream);