Configurable COLLISION_BUFFER_POWER

[jbescos]

Relates to #4152

Running test with 100000 requests and keeping default value (8):

Running test with 100000 requests and COLLISION_BUFFER_POWER = 3:

[senivam]

actually I'm not sure this will work in favor of AccessController.doPrivileged(action); because purpose of the AccessController is to provide to privileged action those privileges which previously that action did not have. So, AccessControler shall supply those

 // Needed by TimeWindowStatisticsImplTest
  permission java.util.PropertyPermission "jersey.config.server.monitoring.collision.buffer.power", "read,write";

you are providing for test purposes to the privileged action of getting property. While securityManager is on for sure.
And running action just by run() method will just invoke it as usual method without any additional privileges.
And SecurityException might not be caught when using AccessController because in that case user can supply proper privileges to be provided to action and thus SecurityException won't be thrown. On the other hand when you just run the action and exception occurs there is no way for privileges to be supplied to it so it will always fail and application will always use default collision buffer.

[senivam]

see note in the source code

[senivam]

LGTM