[jboss-cvs] JBossAS SVN: r80705 - trunk/testsuite/src/resources/securitymgr.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2008-11-08 02:24:39 -0500 (Sat, 08 Nov 2008)
New Revision: 80705

Modified:
   trunk/testsuite/src/resources/securitymgr/server.policy
Log:
JBAS-4154: updated fine grained security manager policy

Modified: trunk/testsuite/src/resources/securitymgr/server.policy
===================================================================
--- trunk/testsuite/src/resources/securitymgr/server.policy	2008-11-08 07:23:00 UTC (rev 80704)
+++ trunk/testsuite/src/resources/securitymgr/server.policy	2008-11-08 07:24:39 UTC (rev 80705)
@@ -69,6 +69,15 @@
    permission java.security.AllPermission;
 };
 
+grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jasper-jdt.jar" {
+   permission java.security.AllPermission;
+};
+
+grant codeBase "file:${jboss.server.home.dir}/deploy/jbossweb.sar/jstl.jar" {
+   permission java.security.AllPermission;
+};
+
+
 grant codeBase "file:${jboss.server.home.dir}/deploy/management/console-mgr.sar/-" {
    permission javax.management.MBeanTrustPermission "register";
    permission javax.management.MBeanPermission "*", "addNotificationListener,getAttribute";
@@ -78,7 +87,8 @@
 
 grant codeBase "file:${jboss.server.home.dir}/deploy/uuid-key-generator.sar/-" {
    permission javax.management.MBeanTrustPermission "register";
-   permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind";
+   permission javax.management.MBeanPermission "*", "getAttribute";
+   permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup,rebind,unbind";
 };
 
 grant codeBase "file:${jboss.server.home.dir}/deploy/jms-ra.rar/jms-ra.jar" {
@@ -89,9 +99,13 @@
 };
 
 
+grant codeBase "file:${jboss.server.home.dir}/deploy/quartz-ra.rar/quartz-ra.jar" {
+   permission java.security.AllPermission;
+};
 
 
 
+
 //***************************************************************
 // JBoss AS Test Suite Permissions
 //***************************************************************
@@ -103,6 +117,12 @@
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup";
 };
 
+grant codeBase "file:${jboss.test.deploy.dir}/jbosstest-web.ear/-" {
+   permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","list,lookup";
+   permission org.jboss.naming.JndiPermission "env","list";
+   permission java.io.FilePermission "<<ALL FILES>>", "read";
+};
+
 grant codeBase "file:${jboss.test.deploy.dir}/-" {
    permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup";
 };
@@ -117,7 +137,8 @@
 // Minimal permissions are allowed to everyone else
 grant {
    permission java.io.FilePermission "${jboss.server.home.dir}/tmp/-", "read";
-   permission java.io.FilePermission "${jboss.server.home.dir}/lib/quartz.jar/org/quartz/quartz.properties", "read";
+   permission java.io.FilePermission "${jboss.home.dir}/server/lib/quartz.jar/org/quartz/quartz.properties", "read";
+   permission org.jboss.naming.JndiPermission "<<ALL BINDINGS>>","lookup";
    permission java.io.FilePermission "quartz.properties", "read";
    permission java.util.PropertyPermission "*", "read";
    permission java.lang.RuntimePermission "queuePrintJob";
@@ -127,9 +148,11 @@
    permission java.lang.RuntimePermission "getClassLoader";
    permission java.lang.RuntimePermission "getProtectionDomain";
    permission java.lang.RuntimePermission "org.jboss.security.SecurityAssociation.getSubject";
+   permission java.lang.RuntimePermission "org.jboss.security.plugins.JBossSecurityContextgetSubjectInfo";
    permission javax.management.MBeanServerPermission "findMBeanServer";
    permission javax.management.MBeanPermission "org.jboss.mx.modelmbean.XMBean#*[JMImplementation:type=MBeanRegistry]", "*";
    permission javax.management.MBeanPermission "org.jboss.security.plugins.AuthorizationManagerService#*[jboss.security:service=AuthorizationManager]", "invoke";
+   permission javax.management.MBeanPermission "org.jboss.jms.server.jbosssx.JBossASSecurityMetadataStore#*[jboss.messaging:service=SecurityStore]", "invoke";
    permission javax.management.MBeanPermission "org.jboss.security.auth.login.XMLLoginConfig#*[jboss.security:service=XMLLoginConfig]", "invoke";
    permission javax.management.MBeanPermission "org.jboss.security.plugins.JaasSecurityManagerService#*[jboss.security:service=JaasSecurityManager]", "invoke";