Merge pull request #22244 from sameer-pandit/privleged

add privileged block in logout

Author: wmhopkins

appserver/security/webintegration/src/main/java/com/sun/web/security/RealmAdapter.java

@@ -517,7 +517,12 @@ private void doLogout(HttpRequest request, boolean extensionEnabled) {
     @Override
     public void logout() {
         setSecurityContext(null);
-        resetPolicyContext();
+        AccessController.doPrivileged(new PrivilegedAction<Void>() {
+            public Void run() {
+                resetPolicyContext();
+                return null;
+            }
+        });
     }
 
     public Principal authenticate(HttpServletRequest hreq) {