Folks,<br><br>Are there any plans to tweak Drools to allow it to run in a security constrained environment such as Google App Engine or Applets? I know some of the other JBoss.org projects have this on the 'todo' list.<br>
<br>When I try to load a simple web application using drools into the Google App Engine, I get the error below.The app itself is the sample 8 from the following web page, but tweaked according to the Google 'howto' to get it up and running in the app engine; <a href="http://code.google.com/p/red-piranha/">http://code.google.com/p/red-piranha/</a><br>
<br>My understanding of the problem is that drools is using File access to check if the configuration file exists the first time it is run. This is constrained in App Engine - just like the J2EE spec says it should be (although most other app servers allow you to get away with this!). I know that if I tweak the source code there will be other points where similar file access is required.<br>
<br>While not trivial, would it be possible to add a one-line check for that the user has permission to do <a href="http://file.io">file.io</a> before calling File.Exists (the alternative , of catching and ignoring the AccessControlException is ugly!). The hardest part of this is that the check would need to be added at multiple points in the Drools source code.<br>
<br>Any thoughts / comments/ suggestions?<br><br>Paul<br><br><a href="http://www.firstpartners.net/blog">www.firstpartners.net/blog</a><br><br><br>WARNING: java.security.AccessControlException: access denied (java.io.FilePermission /home/paul/drools.rulebase.conf read)<br>
13-May-2009 09:04:16 com.google.apphosting.utils.jetty.JettyLogger warn<br>WARNING: Nested in javax.servlet.ServletException: java.security.AccessControlException: access denied (java.io.FilePermission /home/paul/drools.rulebase.conf read):<br>
java.security.AccessControlException: access denied (java.io.FilePermission /home/paul/drools.rulebase.conf read)<br> at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)<br> at java.security.AccessController.checkPermission(AccessController.java:546)<br>
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)<br> at com.google.appengine.tools.development.DevAppServerFactory$CustomSecurityManager.checkPermission(DevAppServerFactory.java:76)<br> at java.lang.SecurityManager.checkRead(SecurityManager.java:871)<br>
at java.io.File.exists(File.java:731)<br> at org.drools.util.ChainedProperties.loadProperties(ChainedProperties.java:225)<br> at org.drools.util.ChainedProperties.<init>(ChainedProperties.java:59)<br> at org.drools.util.ChainedProperties.<init>(ChainedProperties.java:31)<br>
at org.drools.util.ChainedProperties.<init>(ChainedProperties.java:25)<br> at org.drools.RuleBaseConfiguration.init(RuleBaseConfiguration.java:174)<br> at org.drools.RuleBaseConfiguration.<init>(RuleBaseConfiguration.java:133)<br>
at org.drools.common.AbstractRuleBase.<init>(AbstractRuleBase.java:147)<br> at org.drools.reteoo.ReteooRuleBase.<init>(ReteooRuleBase.java:124)<br> at org.drools.reteoo.ReteooRuleBase.<init>(ReteooRuleBase.java:101)<br>
at org.drools.RuleBaseFactory.newRuleBase(RuleBaseFactory.java:57)<br> at org.drools.RuleBaseFactory.newRuleBase(RuleBaseFactory.java:38)<br> at net.firstpartners.drools.RuleRunner.loadRules(RuleRunner.java:39)<br>
at net.firstpartners.drools.RuleRunner.runStatelessRules(RuleRunner.java:167)<br> at net.firstpartners.rp2.rp2Servlet.callRules(rp2Servlet.java:96)<br> at net.firstpartners.rp2.rp2Servlet.service(rp2Servlet.java:137)<br>
at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)<br> at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)<br> at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1093)<br>
at com.google.apphosting.utils.servlet.TransactionCleanupFilter.doFilter(TransactionCleanupFilter.java:43)<br> at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1084)<br> at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:360)<br>
at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)<br> at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181)<br> at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:712)<br>
at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:405)<br> at com.google.apphosting.utils.jetty.DevAppEngineWebAppContext.handle(DevAppEngineWebAppContext.java:54)<br> at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)<br>
at com.google.appengine.tools.development.JettyContainerService$ApiProxyHandler.handle(JettyContainerService.java:306)<br> at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:139)<br> at org.mortbay.jetty.Server.handle(Server.java:313)<br>
at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:506)<br> at org.mortbay.jetty.HttpConnection$RequestHandler.headerComplete(HttpConnection.java:830)<br> at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:514)<br>
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:211)<br> at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:381)<br> at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:396)<br>
at org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:442)<br><br>