« Return to Thread: [Issue 748] New - Fails java.lang.reflect.ReflectPermission suppressAccessChecks when SecurityManager is enabled

[Issue 748] New - Fails java.lang.reflect.ReflectPermission suppressAccessChecks when SecurityManager is enabled

by kumarjayanti-2 :: Rate this Message:

Reply to Author | View in Thread

https://wsit.dev.java.net/issues/show_bug.cgi?id=748
                 Issue #|748
                 Summary|Fails java.lang.reflect.ReflectPermission suppressAcce
                        |ssChecks when SecurityManager is enabled
               Component|wsit
                 Version|current
                Platform|All
              OS/Version|All
                     URL|
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|DEFECT
                Priority|P3
            Subcomponent|jaxws-runtime
             Assigned to|vivekp
             Reported by|kumarjayanti






------- Additional comments from kumarjayanti@... Sun Dec  2 08:31:44 +0000 2007 -------
When Running a WSIT Web Application with SecurityManager ON in GlassFish the
following Exception occurs when the Response from the Application is a Fault.


-----------------------------
JACC Policy Provider: PolicyWrapper.implies, context(null)-
permission((java.lang.reflect.ReflectPermission suppressAccessChecks)) domain
that failed(ProtectionDomain
(file:/D:/UR1/WebApplication3/build/web/WEB-INF/classes/test/NewServlet.class
<no signer certificates>)
 WebappClassLoader
  delegate: true
  repositories:
    /WEB-INF/classes/
----------> Parent Classloader:
EJBClassLoader :
urlSet = []
doneCalled = false
 Parent -> java.net.URLClassLoader@87cd5c
 <no principals>
 java.security.Permissions@163a8b0 (
 (javax.management.MBeanTrustPermission register)
 (javax.management.MBeanPermission [com.sun.messaging.jms.*:*] *)
 (java.util.PropertyPermission java.version read)
 (java.util.PropertyPermission java.vm.name read)
 (java.util.PropertyPermission java.vm.vendor read)
 (java.util.PropertyPermission os.name read)
 (java.util.PropertyPermission java.vendor.url read)
 (java.util.PropertyPermission java.vm.specification.vendor read)
 (java.util.PropertyPermission java.specification.vendor read)
 (java.util.PropertyPermission os.version read)
 (java.util.PropertyPermission java.specification.name read)
 (java.util.PropertyPermission java.class.version read)
 (java.util.PropertyPermission file.separator read)
 (java.util.PropertyPermission java.vm.version read)
 (java.util.PropertyPermission os.arch read)
 (java.util.PropertyPermission java.vm.specification.name read)
 (java.util.PropertyPermission java.vm.specification.version read)
 (java.util.PropertyPermission java.specification.version read)
 (java.util.PropertyPermission java.vendor read)
 (java.util.PropertyPermission * read,write)
 (java.util.PropertyPermission path.separator read)
 (java.util.PropertyPermission line.separator read)
 (javax.security.auth.PrivateCredentialPermission
javax.resource.spi.security.PasswordCredential * "*" read)
 (unresolved com.sun.corba.ee.impl.presentation.rmi.DynamicAccessPermission
access null)
 (unresolved com.sun.enterprise.security.CORBAObjectPermission * *)
 (org.apache.naming.JndiPermission jndi:/server/WebApplication3/*)
 (org.apache.naming.JndiPermission jndi:/server/WebApplication3/WEB-INF/classes/*)
 (java.net.SocketPermission localhost:1024- listen,resolve)
 (java.net.SocketPermission * connect,resolve)
 (java.lang.RuntimePermission loadLibrary.*)
 (java.lang.RuntimePermission getClassLoader)
 (java.lang.RuntimePermission modifyThreadGroup)
 (java.lang.RuntimePermission accessDeclaredMembers)
 (java.lang.RuntimePermission setContextClassLoader)
 (java.lang.RuntimePermission queuePrintJob)
 (java.lang.RuntimePermission getProtectionDomain)
 (java.lang.RuntimePermission stopThread)
 (java.io.FilePermission C:\DOCUME~1\chotu\LOCALS~1\Temp\\- delete)
 (java.io.FilePermission
E:/GLASSFISH/publish/glassfish/domains/domain1\lib\databases\- delete)
 (java.io.FilePermission <<ALL FILES>> read,write)
 (java.io.FilePermission D:\UR1\WebApplication3\build\web\- read)
 (java.io.FilePermission D:\UR1\WebApplication3\build\web read)
 (java.io.FilePermission
E:\GLASSFISH\publish\glassfish\domains\domain1\generated\jsp\j2ee-modules\WebApplication3\-
read,write,delete)
 (java.io.FilePermission
E:\GLASSFISH\publish\glassfish\domains\domain1\generated\jsp\j2ee-modules\WebApplication3
read,write)
 (java.io.FilePermission
\D:\UR1\WebApplication3\build\web\WEB-INF\classes\test\NewServlet.class read)
)
)
WARNING *********** NetBeans HTTP Monitor ************
The request cannot be recorded most likely because the NetBeans HTTP Server is
not running. Go to the IDE and start the HTTP Server from within the Runtime
window to fix this problem.
StandardWrapperValve[NewServlet]: PWC1406: Servlet.service() for servlet
NewServlet threw exception
java.security.AccessControlException: access denied
(java.lang.reflect.ReflectPermission suppressAccessChecks)
        at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at
java.lang.reflect.AccessibleObject.setAccessible(AccessibleObject.java:107)
        at com.sun.xml.bind.v2.ClassFactory.create0(ClassFactory.java:112)
        at
com.sun.xml.bind.v2.runtime.ClassBeanInfoImpl.createInstance(ClassBeanInfoImpl.java:257)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.UnmarshallingContext.createInstance(UnmarshallingContext.java:564)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.StructureLoader.startElement(StructureLoader.java:181)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.UnmarshallingContext._startElement(UnmarshallingContext.java:449)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.UnmarshallingContext.startElement(UnmarshallingContext.java:427)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.InterningXmlVisitor.startElement(InterningXmlVisitor.java:71)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.SAXConnector.startElement(SAXConnector.java:137)
        at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:240)
        at com.sun.xml.bind.unmarshaller.DOMScanner.scan(DOMScanner.java:123)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.UnmarshallerImpl.unmarshal0(UnmarshallerImpl.java:314)
        at
com.sun.xml.bind.v2.runtime.unmarshaller.UnmarshallerImpl.unmarshal(UnmarshallerImpl.java:297)
        at com.sun.xml.ws.fault.ExceptionBean.unmarshal(ExceptionBean.java:80)
        at
com.sun.xml.ws.fault.SOAPFaultBuilder.attachServerException(SOAPFaultBuilder.java:260)
        at
com.sun.xml.ws.fault.SOAPFaultBuilder.createException(SOAPFaultBuilder.java:116)
        at
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:119)
        at
com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:89)
        at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:118)
        at $Proxy97.operation(Unknown Source)
        at test.NewServlet.processRequest(NewServlet.java:49)
        at test.NewServlet.doGet(NewServlet.java:69)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:718)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:831)
        at sun.reflect.GeneratedMethodAccessor80.invoke(Unknown Source)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:276)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
        at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:309)
        at
org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:192)
        at
org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:404)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:317)
        at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:75)
        at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:181)
        at java.security.AccessController.doPrivileged(Native Method)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:177)
        at
org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:390)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230)
        at
org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:75)
        at
org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:181)
        at java.security.AccessController.doPrivileged(Native Method)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:177)
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:288)
        at
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:271)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:202)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:632)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:577)
        at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:94)
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:206)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:632)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:577)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:1080)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:150)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:632)
        at
org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:577)
        at
org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:571)
        at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:1080)
        at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:268)
        at
com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.invokeAdapter(DefaultProcessorTask.java:637)
        at
com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.doProcess(DefaultProcessorTask.java:568)
        at
com.sun.enterprise.web.connector.grizzly.DefaultProcessorTask.process(DefaultProcessorTask.java:813)
        at
com.sun.enterprise.web.connector.grizzly.DefaultReadTask.executeProcessorTask(DefaultReadTask.java:339)
        at
com.sun.enterprise.web.connector.grizzly.DefaultReadTask.doTask(DefaultReadTask.java:261)
        at
com.sun.enterprise.web.connector.grizzly.DefaultReadTask.doTask(DefaultReadTask.java:212)
        at
com.sun.enterprise.web.portunif.PortUnificationPipeline$PUTask.doTask(PortUnificationPipeline.java:361)
        at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:265)
        at
com.sun.enterprise.web.connector.grizzly.ssl.SSLWorkerThread.run(SSLWorkerThread.java:106)
-------------------------------------

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@...
For additional commands, e-mail: issues-help@...

 « Return to Thread: [Issue 748] New - Fails java.lang.reflect.ReflectPermission suppressAccessChecks when SecurityManager is enabled

LightInTheBox - Buy quality products at wholesale price!