velocity-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Steve.Al...@uboc.com
Subject Problem with J2EE security using Velocity in WebSphere
Date Wed, 09 Mar 2005 00:18:50 GMT
Hello all,

I trying to run an application under WebSphere Application Server (WAS
5.0.2.8), and I'm encountering the following error:


[3/8/05 15:31:54:846 PST]  98ee681 SecurityManag W SECJ0314W: Current Java
2 Security policy reported a potential violation of Java 2 Security
Permission. Please refer to Problem Determination Guide for further
information.

Permission:
      <all permissions> : access denied (java.security.AllPermission <all
permissions> <all actions>)

Code:
     org.apache.velocity.runtime.RuntimeInstance  in
{file:/opt/WebSphere/AppServer/installedApps/margeNetwork/CommEnable.J2EE.ear/CommEnable.Web.war/WEB-INF/lib/velocity-dep.jar}

Stack Trace:
java.security.AccessControlException: access denied
(java.security.AllPermission <all permissions> <all actions>)
        at
java.security.AccessControlContext.checkPermission(AccessControlContext.java(Compiled
 Code))
        at
java.security.AccessController.checkPermission(AccessController.java(Compiled
 Code))
        at
java.lang.SecurityManager.checkPermission(SecurityManager.java(Compiled
Code))
        at
com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java(Compiled
 Code))
        at
com.ibm.ws.classloader.SinglePathClassProvider.check(SinglePathClassProvider.java:368)
        at
com.ibm.ws.classloader.SinglePathClassProvider.checkURL(SinglePathClassProvider.java:355)
        at
com.ibm.ws.classloader.SinglePathClassProvider.getResource(SinglePathClassProvider.java:348)
        at
com.ibm.ws.classloader.SinglePathClassProvider.getResourceAsStream(SinglePathClassProvider.java:381)
        at
com.ibm.ws.classloader.CompoundClassLoader.localGetResourceAsStream(CompoundClassLoader.java:594)
        at
com.ibm.ws.classloader.CompoundClassLoader.getResourceAsStream(CompoundClassLoader.java:564)
        at
org.apache.velocity.runtime.RuntimeInstance.setDefaultProperties(RuntimeInstance.java:295)
        at
org.apache.velocity.runtime.RuntimeInstance.initializeProperties(RuntimeInstance.java:423)
        at
org.apache.velocity.runtime.RuntimeInstance.init(RuntimeInstance.java:266)
        at
org.apache.velocity.runtime.RuntimeInstance.init(RuntimeInstance.java:441)
        at
org.apache.velocity.runtime.RuntimeSingleton.init(RuntimeSingleton.java:260)
        at org.apache.velocity.app.Velocity.init(Velocity.java:149)
<the rest of the trace was removed>


I can't grant AllPermissions for the entire application, and I've tried a
variety of grants similar to the following:

grant codeBase "jar:file:
${app.installed.path}/CommEnable.Web.war/WEB-INF/lib/velocity-dep.jar!/" {
  permission java.security.AllPermission;
};

grant codeBase "file:
${app.installed.path}/CommEnable.Web.war/WEB-INF/lib/velocity-dep.jar" {
  permission java.security.AllPermission;
};

grant codeBase "file:${jars}" {
  permission java.security.AllPermission;
};

and none resolve the problem.

Anybody have an explanation for this?

Thanks in advance.


******************************************************************************
This communication (including any attachments) may contain privileged or
confidential information intended for a specific individual and purpose, 
and is protected by law.  If you are not the intended recipient, you should
delete this communication and/or shred the materials and any attachments and
are hereby notified that any disclosure, copying, or distribution of this
communication, or the taking of any action based on it, is strictly prohibited.

Thank you.

---------------------------------------------------------------------
To unsubscribe, e-mail: velocity-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: velocity-user-help@jakarta.apache.org


Mime
View raw message