[
https://issues.apache.org/jira/browse/OWB-312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
YING WANG reassigned OWB-312:
-----------------------------
Assignee: YING WANG (was: Gurkan Erdogdu)
> Add dopriv's to allow OWB to function with java 2 security enabled
> ------------------------------------------------------------------
>
> Key: OWB-312
> URL: https://issues.apache.org/jira/browse/OWB-312
> Project: OpenWebBeans
> Issue Type: Bug
> Components: Core
> Affects Versions: M4
> Reporter: Jacquelle Leggett
> Assignee: YING WANG
> Fix For: 1.0.0
>
>
> When using OWB with java 2 security enabled, my application requires the
> following permissions:
> permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
> permission java.lang.RuntimePermission "accessDeclaredMembers";
> permission java.lang.RuntimePermission "getClassLoader";
> permission java.lang.RuntimePermission "getProtectionDomain";
> The associated errors do not appear to be strategic security exceptions;
> therefore, dopriv blocks should be added to the appropriate sections of code.
> Adding dopriv blocks to AnnotationUtil and ClassUtil, will resolve most of
> the issues based on the SecurityExceptions I saw.
> java.security.AccessControlException: Access denied
> (java.lang.RuntimePermission accessDeclaredMembers)
> at
> java.security.AccessController.checkPermission(AccessController.java:108)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java:533)
> at
> com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:212)
> at
> java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1678)
> at java.lang.Class.checkMemberAccess(Class.java:109)
> at java.lang.Class.getDeclaredMethods(Class.java:668)
> at
> org.apache.webbeans.util.AnnotationUtil.hasAnnotationMember(AnnotationUtil.java:457)
> at
> org.apache.webbeans.container.InjectionResolver.findByQualifier(InjectionResolver.java:523)
> at
> org.apache.webbeans.container.InjectionResolver.implResolveByType(InjectionResolver.java:410)
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
