[jboss-jira] [JBoss JIRA] Created: (JBSER-105) Missing privileged blocks

[David Lloyd (JIRA)]

Missing privileged blocks
-------------------------

                 Key: JBSER-105
                 URL: http://jira.jboss.com/jira/browse/JBSER-105
             Project: JBoss Serialization
          Issue Type: Bug
    Affects Versions: 1.0.3 GA
            Reporter: David Lloyd
         Assigned To: Clebert Suconic


Code bases using JBoss Serialization need the following permissions in order to run JBSER.  There should be privileged blocks in place so that the permissions can be granted to JBSER instead of granting the permissions to each application.

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1662)
        at java.lang.Class.checkMemberAccess(Class.java:2157)
        at java.lang.Class.getDeclaredMethod(Class.java:1934)
        at org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:137)

java.security.AccessControlException: access denied (java.lang.reflect.ReflectPermission suppressAccessChecks)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:107)
        at org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:148)

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.reflect)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:273)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
        at org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)

java.security.AccessControlException: access denied (java.lang.RuntimePermission reflectionFactoryAccess)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at sun.reflect.ReflectionFactory.getReflectionFactory(ReflectionFactory.java:97)
        at org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)

java.security.AccessControlException: access denied (java.io.SerializablePermission enableSubstitution)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
        at java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.io.ObjectOutputStream.enableReplaceObject(ObjectOutputStream.java:592)
        at org.jboss.remoting.serialization.impl.java.MarshalledValueOutputStream.access$000(MarshalledValueOutputStream.java:45)


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira