8:31 a.m.
I have a problem with Tapestry/HiveMind application which uses Javassist for bytecode
manipulation. It seems that newly created classes that are loaded by Javassist do not
inherit ProtectionDomain from the other classes, this leads to the problem that
application server WebSphere can not associate them with any of the JAR files and apply a
security policy to them. The problem is visible on the following stack trace, you can see
that location of the code that causes security exception is unknown (null).
Environment is WebSphere 5 with Secruty ON (Enforce Java2 Security):
[7/15/06 15:22:41:049 CEST] 6642251f SecurityManag W SECJ0314W: Current Java 2 Security
policy reported a potential violation of Java 2 Security Permission.
Please refer to Problem Determination Guide for further information.
Permission:
/opt/WebSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-INF/lib/tapestry-4.1.jar
: access denied (java.io.FilePermission /opt/We
bSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-INF/lib/tapestry-4.1.jar
read)
Code:
$ApplicationInitializer_10c725a4dba in {null code URL}
Stack Trace:
java.security.AccessControlException: access denied (java.io.FilePermission
/opt/WebSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-IN
F/lib/tapestry-4.1.jar read)
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java(Compiled
Code))
at java.security.AccessController.checkPermission(AccessController.java(Compiled
Code))
at java.lang.SecurityManager.checkPermission(SecurityManager.java(Compiled Code))
at
com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java(Compiled
Code))
at java.lang.SecurityManager.checkRead(SecurityManager.java(Compiled Code))
at java.util.zip.ZipFile.(ZipFile.java(Compiled Code))
at java.util.zip.ZipFile.(ZipFile.java(Inlined Compiled Code))
at
com.ibm.ws.classloader.Handler$ClassLoaderURLConnection.getInputStream(Handler.java(Compiled
Code))
at java.net.URL.openStream(URL.java(Inlined Compiled Code))
at
com.ibm.ws.classloader.SinglePathClassProvider.getResourceAsStream(SinglePathClassProvider.java(Inlined
Compiled Code))
at
com.ibm.ws.classloader.CompoundClassLoader.localGetResourceAsStream(CompoundClassLoader.java(Compiled
Code))
at
com.ibm.ws.classloader.CompoundClassLoader.getResourceAsStream(CompoundClassLoader.java(Compiled
Code))
at javassist.LoaderClassPath.openClassfile(LoaderClassPath.java:70)
at javassist.ClassPoolTail.openClassfile(ClassPoolTail.java:283)
at javassist.ClassPool.openClassfile(ClassPool.java(Inlined Compiled Code))
at javassist.CtClassType.getClassFile2(CtClassType.java(Compiled Code))
at javassist.CtClassType.subtypeOf(CtClassType.java:267)
at javassist.compiler.MemberResolver.compareSignature(MemberResolver.java:203)
at javassist.compiler.MemberResolver.lookupMethod(MemberResolver.java:97)
at javassist.compiler.TypeChecker.atMethodCallCore(TypeChecker.java:637)
at javassist.compiler.TypeChecker.atCallExpr(TypeChecker.java:614)
at javassist.compiler.JvstTypeChecker.atCallExpr(JvstTypeChecker.java:156)
at javassist.compiler.ast.CallExpr.accept(CallExpr.java:45)
at javassist.compiler.CodeGen.doTypeCheck(CodeGen.java:235)
at javassist.compiler.CodeGen.atStmnt(CodeGen.java:323)
at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
at javassist.compiler.CodeGen.atIfStmnt(CodeGen.java:384)
at javassist.compiler.CodeGen.atStmnt(CodeGen.java:348)
at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
at javassist.compiler.CodeGen.atStmnt(CodeGen.java:344)
at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
at javassist.compiler.CodeGen.atMethodBody(CodeGen.java:285)
at javassist.compiler.Javac.compileBody(Javac.java:208)
at javassist.CtBehavior.setBody(CtBehavior.java:188)
at javassist.CtBehavior.setBody(CtBehavior.java:163)
at org.apache.hivemind.service.impl.ClassFabImpl.addMethod(ClassFabImpl.java:288)
at
org.apache.hivemind.service.impl.LoggingInterceptorFactory.addServiceMethodImplementation(LoggingInterceptorFactory.java:120)
at
org.apache.hivemind.service.impl.LoggingInterceptorFactory.addServiceMethods(LoggingInterceptorFactory.java:159)
at
org.apache.hivemind.service.impl.LoggingInterceptorFactory.constructInterceptorClass(LoggingInterceptorFactory.java:214)
at
org.apache.hivemind.service.impl.LoggingInterceptorFactory.createInterceptor(LoggingInterceptorFactory.java:251)
at
org.apache.hivemind.impl.ServiceInterceptorContributionImpl.createInterceptor(ServiceInterceptorContributionImpl.java:95)
at
org.apache.hivemind.impl.InterceptorStackImpl.process(InterceptorStackImpl.java:116)
at
org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.addInterceptors(AbstractServiceModelImpl.java:85)
at
org.apache.hivemind.impl.servicemodel.PooledServiceModel.constructServiceProxy(PooledServiceModel.java:154)
at
org.apache.hivemind.impl.servicemodel.PooledServiceModel.(PooledServiceModel.java:130)
at
org.apache.hivemind.impl.servicemodel.PooledServiceModelFactory.createServiceModelForService(PooledServiceModelFactory.java:26)
at
org.apache.hivemind.impl.ServicePointImpl.getService(ServicePointImpl.java:208)
at
org.apache.hivemind.impl.ServicePointImpl.getService(ServicePointImpl.java:223)
at
org.apache.hivemind.impl.RegistryInfrastructureImpl.getService(RegistryInfrastructureImpl.java:207)
at org.apache.hivemind.impl.ModuleImpl.getService(ModuleImpl.java:105)
at
org.apache.hivemind.schema.rules.ServiceTranslator.translate(ServiceTranslator.java:40)
at
org.apache.hivemind.service.impl.BuilderPropertyFacet.getFacetValue(BuilderPropertyFacet.java:55)
at
org.apache.hivemind.service.impl.BuilderFactoryLogic.wireProperty(BuilderFactoryLogic.java:357)
at
org.apache.hivemind.service.impl.BuilderFactoryLogic.setProperties(BuilderFactoryLogic.java:320)
at
org.apache.hivemind.service.impl.BuilderFactoryLogic.createService(BuilderFactoryLogic.java:77)
at
org.apache.hivemind.service.impl.BuilderFactory.createCoreServiceImplementation(BuilderFactory.java:42)
at
org.apache.hivemind.impl.InvokeFactoryServiceConstructor.constructCoreServiceImplementation(InvokeFactoryServiceConstructor.java:62)
at
org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructCoreServiceImplementation(AbstractServiceModelImpl.java:108)
at
org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructNewServiceImplementation(AbstractServiceModelImpl.java:158)
at
org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructServiceImplementation(AbstractServiceModelImpl.java:140)
at
org.apache.hivemind.impl.servicemodel.SingletonServiceModel.getActualServiceImplementation(SingletonServiceModel.java:69)
at
$ApplicationInitializer_10c725a4dba._service($ApplicationInitializer_10c725a4dba.java)
at
$ApplicationInitializer_10c725a4dba.initialize($ApplicationInitializer_10c725a4dba.java)
at
$ApplicationInitializer_10c725a4db9.initialize($ApplicationInitializer_10c725a4db9.java)
at
$ApplicationInitializer_10c725a4dbd.initialize($ApplicationInitializer_10c725a4dbd.java)
at
$ApplicationInitializer_10c725a4db2.initialize($ApplicationInitializer_10c725a4db2.java)
at
$ApplicationInitializer_10c725a4db1.initialize($ApplicationInitializer_10c725a4db1.java)
at
org.apache.tapestry.ApplicationServlet.initializeApplication(ApplicationServlet.java:299)
at org.apache.tapestry.ApplicationServlet.init(ApplicationServlet.java:198)
at
com.ibm.ws.webcontainer.servlet.StrictServletInstance.doInit(StrictServletInstance.java:82)
at
com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._init(StrictLifecycleServlet.java:147)
at
com.ibm.ws.webcontainer.servlet.PreInitializedServletState.init(StrictLifecycleServlet.java:270)
at
com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.init(StrictLifecycleServlet.java:113)
at com.ibm.ws.webcontainer.servlet.ServletInstance.init(ServletInstance.java:189)
at javax.servlet.GenericServlet.init(GenericServlet.java:258)
...
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3958455#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...