On a side note - This is one of the reasons why I suggested to you Mike to simply upload your App onto the hosting server, rather than trying to test is piecemeal.
If the whole application is uploaded, you can test and fix issues that are relevant *to your application*, and not spend several days trying to track down an issue that really doesn't stop your application from running. This is just my opinion however ;o) your mileage may vary. Mark On 10/24/07, Mark Mandel <[EMAIL PROTECTED]> wrote: > I wish I had kept an eye on this thread! > > Apologies to Mike - when working around the 'Disable Access to > ColdFusion Java Objects' setting in CF8, I ran into the issue that you > can't use cfdump on many things. > > On some things you can, and on other things you can't. > > The reason is this - by turning this setting on there is a security > policy that goes into effect that restricts external access to > anything that is coldfusion.* - which includes trying to access and / > or interogate any class or classpath that uses that space. > > If you do a lot of CF/Java integration, you will quickly notice that > you can't get to the CF classPath, if you want it, and trying to call > .getClass() (often through reflection) on CF objects causes the error > that you just saw. > > I would expect that CFDUMP does call getClass / does some sort of java > meta data introspection on the objects it is attempting to dump - > which in turn throws this error, as it won't be allowed. > > This setting - while essential for Shared Hosts, is a pretty damn big > sword that cuts through many things, including aspects of cfdump, > access to CFCProxy and some other bits and pieces that I can't think > of right now. > > I think in the coming months, we're going to hit various pieces of > functionality that will be broken on shared servers because of this > setting. > > Mark > > On 10/24/07, Sean Corfield <[EMAIL PROTECTED]> wrote: > > On 10/23/07, Andrew Scott <[EMAIL PROTECTED]> wrote: > > > However that does mystify me though, cfdump I would not have taken as > > > an internal java tag? > > > > I think this is simply an oversight by the CF team - cfdump does not > > work properly when you turn Java object access off with this new > > setting. > > > > > But what doed also worry me is that the file cfdump.cfm is missing as > > > Mike also stated earlier by the hosting provider. > > > > I think that was a miscommunication... > > -- > > Sean A Corfield -- (904) 302-SEAN > > An Architect's View -- http://corfield.org/ > > > > "If you're not annoying somebody, you're not really alive." > > -- Margaret Atwood > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Get involved in the latest ColdFusion discussions, product development sharing, and articles on the Adobe Labs wiki. http://labs/adobe.com/wiki/index.php/ColdFusion_8 Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:291936 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
