[jboss-jira] [JBoss JIRA] Updated: (JASSIST-23) Java 2 Security ProtiectionDomain is not associated with new generated classes

Java 2 Security ProtiectionDomain is not associated with new generated classes ------------------------------------------------------------------------------ Key: JASSIST-23 URL: http://jira.jboss.com/jira/browse/JASSIST-23 Project: Javassist Issue Type: Bug Environment: IBM WebSphere 5.1 with J2EE Security ON, Javassist 3.0, Tapestry 4.1, HiveMind 1.1.1 Reporter: Renat Zubairov Assigned To: Shigeru Chiba Priority: Blocker Attachments: ClassPool.java, exception.txt Original Estimate: 3 hours Remaining Estimate: 3 hours Classes that are generated using Javassist have no associated protection domain therefore it is not possible for JVM to assign permissions based on the static JAR files names, this is severe problem because it is not possible to grant permissions, hence all permissions are vorbidden, since that nothing works. Javassist is used by HiveMind to generate proxy classes for it's services, an see the stack trace (in attachment) the generated classes can't be associated with any ProtectionDomain, therefore _any Javassist supported application is impossble to start under strict security in Java_.