1 files changed, 40 insertions, 32 deletions

diff --git a/src/isolate.rs b/src/isolate.rs
index 3473f306b..dac4f6d78 100644
--- a/src/isolate.rs
+++ b/src/isolate.rs
@@ -64,6 +64,7 @@ pub struct Isolate {
   timeout_due: Cell<Option<Instant>>,
   pub modules: RefCell<Modules>,
   pub state: Arc<IsolateState>,
+  pub permissions: Arc<DenoPermissions>,
 }
 
 pub type WorkerSender = async_mpsc::Sender<Buf>;
@@ -78,7 +79,6 @@ pub type WorkerChannels = (WorkerSender, WorkerReceiver);
 pub struct IsolateState {
   pub dir: deno_dir::DenoDir,
   pub argv: Vec<String>,
-  pub permissions: DenoPermissions,
   pub flags: flags::DenoFlags,
   pub metrics: Metrics,
   pub worker_channels: Option<Mutex<WorkerChannels>>,
@@ -96,7 +96,6 @@ impl IsolateState {
       dir: deno_dir::DenoDir::new(flags.reload, flags.recompile, custom_root)
         .unwrap(),
       argv: argv_rest,
-      permissions: DenoPermissions::new(&flags),
       flags,
       metrics: Metrics::default(),
       worker_channels: worker_channels.map(Mutex::new),
@@ -127,31 +126,6 @@ impl IsolateState {
     Arc::new(IsolateState::new(flags, rest_argv, None))
   }
 
-  #[inline]
-  pub fn check_read(&self, filename: &str) -> DenoResult<()> {
-    self.permissions.check_read(filename)
-  }
-
-  #[inline]
-  pub fn check_write(&self, filename: &str) -> DenoResult<()> {
-    self.permissions.check_write(filename)
-  }
-
-  #[inline]
-  pub fn check_env(&self) -> DenoResult<()> {
-    self.permissions.check_env()
-  }
-
-  #[inline]
-  pub fn check_net(&self, filename: &str) -> DenoResult<()> {
-    self.permissions.check_net(filename)
-  }
-
-  #[inline]
-  pub fn check_run(&self) -> DenoResult<()> {
-    self.permissions.check_run()
-  }
-
   fn metrics_op_dispatched(
     &self,
     bytes_sent_control: usize,
@@ -195,6 +169,7 @@ impl Isolate {
     snapshot: libdeno::deno_buf,
     state: Arc<IsolateState>,
     dispatch: Dispatch,
+    permissions: DenoPermissions,
   ) -> Self {
     DENO_INIT.call_once(|| {
       unsafe { libdeno::deno_init() };
@@ -218,6 +193,7 @@ impl Isolate {
       timeout_due: Cell::new(None),
       modules: RefCell::new(Modules::new()),
       state,
+      permissions: Arc::new(permissions),
     }
   }
 
@@ -242,6 +218,31 @@ impl Isolate {
     self.timeout_due.set(inst);
   }
 
+  #[inline]
+  pub fn check_read(&self, filename: &str) -> DenoResult<()> {
+    self.permissions.check_read(filename)
+  }
+
+  #[inline]
+  pub fn check_write(&self, filename: &str) -> DenoResult<()> {
+    self.permissions.check_write(filename)
+  }
+
+  #[inline]
+  pub fn check_env(&self) -> DenoResult<()> {
+    self.permissions.check_env()
+  }
+
+  #[inline]
+  pub fn check_net(&self, filename: &str) -> DenoResult<()> {
+    self.permissions.check_net(filename)
+  }
+
+  #[inline]
+  pub fn check_run(&self) -> DenoResult<()> {
+    self.permissions.check_run()
+  }
+
   pub fn last_exception(&self) -> Option<JSError> {
     let ptr = unsafe { libdeno::deno_last_exception(self.libdeno_isolate) };
     if ptr.is_null() {
@@ -618,7 +619,8 @@ mod tests {
   fn test_dispatch_sync() {
     let state = IsolateState::mock();
     let snapshot = libdeno::deno_buf::empty();
-    let isolate = Isolate::new(snapshot, state, dispatch_sync);
+    let permissions = DenoPermissions::default();
+    let isolate = Isolate::new(snapshot, state, dispatch_sync, permissions);
     tokio_util::init(|| {
       isolate
         .execute(
@@ -657,7 +659,9 @@ mod tests {
   fn test_metrics_sync() {
     let state = IsolateState::mock();
     let snapshot = libdeno::deno_buf::empty();
-    let isolate = Isolate::new(snapshot, state, metrics_dispatch_sync);
+    let permissions = DenoPermissions::default();
+    let isolate =
+      Isolate::new(snapshot, state, metrics_dispatch_sync, permissions);
     tokio_util::init(|| {
       // Verify that metrics have been properly initialized.
       {
@@ -691,7 +695,9 @@ mod tests {
   fn test_metrics_async() {
     let state = IsolateState::mock();
     let snapshot = libdeno::deno_buf::empty();
-    let isolate = Isolate::new(snapshot, state, metrics_dispatch_async);
+    let permissions = DenoPermissions::default();
+    let isolate =
+      Isolate::new(snapshot, state, metrics_dispatch_async, permissions);
     tokio_util::init(|| {
       // Verify that metrics have been properly initialized.
       {
@@ -779,7 +785,8 @@ mod tests {
 
     let state = Arc::new(IsolateState::new(flags, rest_argv, None));
     let snapshot = libdeno::deno_buf::empty();
-    let mut isolate = Isolate::new(snapshot, state, dispatch_sync);
+    let permissions = DenoPermissions::default();
+    let mut isolate = Isolate::new(snapshot, state, dispatch_sync, permissions);
     tokio_util::init(|| {
       isolate
         .execute_mod(filename, false)
@@ -801,7 +808,8 @@ mod tests {
 
     let state = Arc::new(IsolateState::new(flags, rest_argv, None));
     let snapshot = libdeno::deno_buf::empty();
-    let mut isolate = Isolate::new(snapshot, state, dispatch_sync);
+    let permissions = DenoPermissions::default();
+    let mut isolate = Isolate::new(snapshot, state, dispatch_sync, permissions);
     tokio_util::init(|| {
       isolate
         .execute_mod(filename, false)