[jboss-user] [Javassist user questions] - AccessControlException on generated classes due to missing

[renat-zubairov]

I have a problem with Tapestry/HiveMind application which uses Javassist for bytecode manipulation. It seems that newly created classes that are loaded by Javassist do not inherit ProtectionDomain from the other classes, this leads to the problem that application server WebSphere can not associate them with any of the JAR files and apply a security policy to them. The problem is visible on the following stack trace, you can see that location of the code that causes security exception is unknown (null).

Environment is WebSphere 5 with Secruty ON (Enforce Java2 Security):



[7/15/06 15:22:41:049 CEST] 6642251f SecurityManag W SECJ0314W: Current Java 2 Security policy reported a potential violation of Java 2 Security Permission.
Please refer to Problem Determination Guide for further information.

Permission:

      /opt/WebSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-INF/lib/tapestry-4.1.jar : access denied (java.io.FilePermission /opt/We
bSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-INF/lib/tapestry-4.1.jar read)


Code:

     $ApplicationInitializer_10c725a4dba  in  {null code URL}



Stack Trace:

java.security.AccessControlException: access denied (java.io.FilePermission /opt/WebSphere/AppServer/installedApps/servernameNetwork/sjrthr.ear/sjrtpg.war/WEB-IN
F/lib/tapestry-4.1.jar read)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java(Compiled Code))
        at java.security.AccessController.checkPermission(AccessController.java(Compiled Code))
        at java.lang.SecurityManager.checkPermission(SecurityManager.java(Compiled Code))
        at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java(Compiled Code))
        at java.lang.SecurityManager.checkRead(SecurityManager.java(Compiled Code))
        at java.util.zip.ZipFile.(ZipFile.java(Compiled Code))
        at java.util.zip.ZipFile.(ZipFile.java(Inlined Compiled Code))
        at com.ibm.ws.classloader.Handler$ClassLoaderURLConnection.getInputStream(Handler.java(Compiled Code))
        at java.net.URL.openStream(URL.java(Inlined Compiled Code))
        at com.ibm.ws.classloader.SinglePathClassProvider.getResourceAsStream(SinglePathClassProvider.java(Inlined Compiled Code))
        at com.ibm.ws.classloader.CompoundClassLoader.localGetResourceAsStream(CompoundClassLoader.java(Compiled Code))
        at com.ibm.ws.classloader.CompoundClassLoader.getResourceAsStream(CompoundClassLoader.java(Compiled Code))
        at javassist.LoaderClassPath.openClassfile(LoaderClassPath.java:70)
        at javassist.ClassPoolTail.openClassfile(ClassPoolTail.java:283)
        at javassist.ClassPool.openClassfile(ClassPool.java(Inlined Compiled Code))
        at javassist.CtClassType.getClassFile2(CtClassType.java(Compiled Code))
        at javassist.CtClassType.subtypeOf(CtClassType.java:267)
        at javassist.compiler.MemberResolver.compareSignature(MemberResolver.java:203)
        at javassist.compiler.MemberResolver.lookupMethod(MemberResolver.java:97)
        at javassist.compiler.TypeChecker.atMethodCallCore(TypeChecker.java:637)
        at javassist.compiler.TypeChecker.atCallExpr(TypeChecker.java:614)
        at javassist.compiler.JvstTypeChecker.atCallExpr(JvstTypeChecker.java:156)
        at javassist.compiler.ast.CallExpr.accept(CallExpr.java:45)
        at javassist.compiler.CodeGen.doTypeCheck(CodeGen.java:235)
        at javassist.compiler.CodeGen.atStmnt(CodeGen.java:323)
        at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
        at javassist.compiler.CodeGen.atIfStmnt(CodeGen.java:384)
        at javassist.compiler.CodeGen.atStmnt(CodeGen.java:348)
        at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
        at javassist.compiler.CodeGen.atStmnt(CodeGen.java:344)
        at javassist.compiler.ast.Stmnt.accept(Stmnt.java:49)
        at javassist.compiler.CodeGen.atMethodBody(CodeGen.java:285)
        at javassist.compiler.Javac.compileBody(Javac.java:208)
        at javassist.CtBehavior.setBody(CtBehavior.java:188)
        at javassist.CtBehavior.setBody(CtBehavior.java:163)
        at org.apache.hivemind.service.impl.ClassFabImpl.addMethod(ClassFabImpl.java:288)
        at org.apache.hivemind.service.impl.LoggingInterceptorFactory.addServiceMethodImplementation(LoggingInterceptorFactory.java:120)
        at org.apache.hivemind.service.impl.LoggingInterceptorFactory.addServiceMethods(LoggingInterceptorFactory.java:159)
        at org.apache.hivemind.service.impl.LoggingInterceptorFactory.constructInterceptorClass(LoggingInterceptorFactory.java:214)
        at org.apache.hivemind.service.impl.LoggingInterceptorFactory.createInterceptor(LoggingInterceptorFactory.java:251)
        at org.apache.hivemind.impl.ServiceInterceptorContributionImpl.createInterceptor(ServiceInterceptorContributionImpl.java:95)
        at org.apache.hivemind.impl.InterceptorStackImpl.process(InterceptorStackImpl.java:116)
        at org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.addInterceptors(AbstractServiceModelImpl.java:85)
        at org.apache.hivemind.impl.servicemodel.PooledServiceModel.constructServiceProxy(PooledServiceModel.java:154)
        at org.apache.hivemind.impl.servicemodel.PooledServiceModel.(PooledServiceModel.java:130)
        at org.apache.hivemind.impl.servicemodel.PooledServiceModelFactory.createServiceModelForService(PooledServiceModelFactory.java:26)
        at org.apache.hivemind.impl.ServicePointImpl.getService(ServicePointImpl.java:208)
        at org.apache.hivemind.impl.ServicePointImpl.getService(ServicePointImpl.java:223)
        at org.apache.hivemind.impl.RegistryInfrastructureImpl.getService(RegistryInfrastructureImpl.java:207)
        at org.apache.hivemind.impl.ModuleImpl.getService(ModuleImpl.java:105)
        at org.apache.hivemind.schema.rules.ServiceTranslator.translate(ServiceTranslator.java:40)
        at org.apache.hivemind.service.impl.BuilderPropertyFacet.getFacetValue(BuilderPropertyFacet.java:55)
        at org.apache.hivemind.service.impl.BuilderFactoryLogic.wireProperty(BuilderFactoryLogic.java:357)
        at org.apache.hivemind.service.impl.BuilderFactoryLogic.setProperties(BuilderFactoryLogic.java:320)
        at org.apache.hivemind.service.impl.BuilderFactoryLogic.createService(BuilderFactoryLogic.java:77)
        at org.apache.hivemind.service.impl.BuilderFactory.createCoreServiceImplementation(BuilderFactory.java:42)
        at org.apache.hivemind.impl.InvokeFactoryServiceConstructor.constructCoreServiceImplementation(InvokeFactoryServiceConstructor.java:62)
        at org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructCoreServiceImplementation(AbstractServiceModelImpl.java:108)
        at org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructNewServiceImplementation(AbstractServiceModelImpl.java:158)
        at org.apache.hivemind.impl.servicemodel.AbstractServiceModelImpl.constructServiceImplementation(AbstractServiceModelImpl.java:140)
        at org.apache.hivemind.impl.servicemodel.SingletonServiceModel.getActualServiceImplementation(SingletonServiceModel.java:69)
        at $ApplicationInitializer_10c725a4dba._service($ApplicationInitializer_10c725a4dba.java)
        at $ApplicationInitializer_10c725a4dba.initialize($ApplicationInitializer_10c725a4dba.java)
        at $ApplicationInitializer_10c725a4db9.initialize($ApplicationInitializer_10c725a4db9.java)
        at $ApplicationInitializer_10c725a4dbd.initialize($ApplicationInitializer_10c725a4dbd.java)
        at $ApplicationInitializer_10c725a4db2.initialize($ApplicationInitializer_10c725a4db2.java)
        at $ApplicationInitializer_10c725a4db1.initialize($ApplicationInitializer_10c725a4db1.java)
        at org.apache.tapestry.ApplicationServlet.initializeApplication(ApplicationServlet.java:299)
        at org.apache.tapestry.ApplicationServlet.init(ApplicationServlet.java:198)
        at com.ibm.ws.webcontainer.servlet.StrictServletInstance.doInit(StrictServletInstance.java:82)
        at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet._init(StrictLifecycleServlet.java:147)
        at com.ibm.ws.webcontainer.servlet.PreInitializedServletState.init(StrictLifecycleServlet.java:270)
        at com.ibm.ws.webcontainer.servlet.StrictLifecycleServlet.init(StrictLifecycleServlet.java:113)
        at com.ibm.ws.webcontainer.servlet.ServletInstance.init(ServletInstance.java:189)
        at javax.servlet.GenericServlet.init(GenericServlet.java:258)
        ...


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3958455#3958455

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3958455