[jboss-jira] [JBoss JIRA] (AS7-3744) AccessControlException because of SerializableClass.callReadObject

AccessControlException because of SerializableClass.callReadObject ------------------------------------------------------------------ Key: AS7-3744 URL: https://issues.jboss.org/browse/AS7-3744 Project: Application Server 7 Issue Type: Bug Components: Remoting Affects Versions: 1.3.7.GA Environment: Fedora 16 Reporter: Will Reichert Assignee: David Lloyd Priority: Blocker see https://community.jboss.org/message/716366#716366 for details. Invoking an EJB from a remote client throws an AccessControlException after 60+ successful invocations despite AllPermission in the policy file. The patch we developed in the discussion was to modify org/jboss/marshalling/reflect/SerializableClass.callReadObject(...) to use a privileged action. The workaround passed the tests in jboss-marshalling and worked for the remote EJB invocation (over 100,000 successful invocations before stopping test).