[jboss-jira] [JBoss JIRA] Commented: (JBSER-105) Missing privileged blocks

[David Lloyd (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBSER-105?page=comments#action_12403949 ] 
            
David Lloyd commented on JBSER-105:
-----------------------------------

Another:

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at org.jboss.test.security.LoggingSecurityManager.checkPermission(LoggingSecurityManager.java:22)
        at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512)
        at org.jboss.test.security.LoggingSecurityManager.checkPackageAccess(LoggingSecurityManager.java:231)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:265)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
        at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
        at org.jboss.serial.classmetamodel.UnsafeFieldsManager.<clinit>(UnsafeFieldsManager.java:63)


> Missing privileged blocks
> -------------------------
>
>                 Key: JBSER-105
>                 URL: http://jira.jboss.com/jira/browse/JBSER-105
>             Project: JBoss Serialization
>          Issue Type: Bug
>    Affects Versions: 1.0.3 GA
>            Reporter: David Lloyd
>         Assigned To: Clebert Suconic
>
> Code bases using JBoss Serialization need the following permissions in order to run JBSER.  There should be privileged blocks in place so that the permissions can be granted to JBSER instead of granting the permissions to each application.
> java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
>         at java.security.AccessController.checkPermission(AccessController.java:546)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         at java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1662)
>         at java.lang.Class.checkMemberAccess(Class.java:2157)
>         at java.lang.Class.getDeclaredMethod(Class.java:1934)
>         at org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:137)
> java.security.AccessControlException: access denied (java.lang.reflect.ReflectPermission suppressAccessChecks)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
>         at java.security.AccessController.checkPermission(AccessController.java:546)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         at java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:107)
>         at org.jboss.serial.classmetamodel.ClassMetamodelFactory.<clinit>(ClassMetamodelFactory.java:148)
> java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.reflect)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
>         at java.security.AccessController.checkPermission(AccessController.java:546)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:1512)
>         at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:273)
>         at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
>         at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:319)
>         at org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)
> java.security.AccessControlException: access denied (java.lang.RuntimePermission reflectionFactoryAccess)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
>         at java.security.AccessController.checkPermission(AccessController.java:546)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         at sun.reflect.ReflectionFactory.getReflectionFactory(ReflectionFactory.java:97)
>         at org.jboss.serial.classmetamodel.SunConstructorManager.<clinit>(SunConstructorManager.java:46)
> java.security.AccessControlException: access denied (java.io.SerializablePermission enableSubstitution)
>         at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
>         at java.security.AccessController.checkPermission(AccessController.java:546)
>         at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
>         at java.io.ObjectOutputStream.enableReplaceObject(ObjectOutputStream.java:592)
>         at org.jboss.remoting.serialization.impl.java.MarshalledValueOutputStream.access$000(MarshalledValueOutputStream.java:45)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira