[
http://jira.jboss.com/jira/browse/JBSER-105?page=comments#action_12403878 ]
David Lloyd commented on JBSER-105:
-----------------------------------
Here's another:
java.security.AccessControlException: access denied (java.io.SerializablePermission
enableSubclassImplementation)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.io.ObjectOutputStream.<init>(ObjectOutputStream.java:253)
at
org.jboss.serial.io.JBossObjectOutputStream.<init>(JBossObjectOutputStream.java:126)
Missing privileged blocks
-------------------------
Key: JBSER-105
URL:
http://jira.jboss.com/jira/browse/JBSER-105
Project: JBoss Serialization
Issue Type: Bug
Affects Versions: 1.0.3 GA
Reporter: David Lloyd
Assigned To: Clebert Suconic
Code bases using JBoss Serialization need the following permissions in order to run
JBSER. There should be privileged blocks in place so that the permissions can be granted
to JBSER instead of granting the permissions to each application.
java.security.AccessControlException: access denied (java.lang.RuntimePermission
accessDeclaredMembers)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1662)
at java.lang.Class.checkMemberAccess(Class.java:2157)
at java.lang.Class.getDeclaredMethod(Class.java:1934)
at
org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:137)
java.security.AccessControlException: access denied (java.lang.reflect.ReflectPermission
suppressAccessChecks)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:107)
at
org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:148)
java.security.AccessControlException: access denied (java.lang.RuntimePermission
accessClassInPackage.sun.reflect)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:273)
at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
at
org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)
java.security.AccessControlException: access denied (java.lang.RuntimePermission
reflectionFactoryAccess)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at sun.reflect.ReflectionFactory.getReflectionFactory(ReflectionFactory.java:97)
at
org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)
java.security.AccessControlException: access denied (java.io.SerializablePermission
enableSubstitution)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.io.ObjectOutputStream.enableReplaceObject(ObjectOutputStream.java:592)
at
org.jboss.remoting.serialization.impl.java.MarshalledValueOutputStream.access$000(MarshalledValueOutputStream.java:45)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira