HI All,

I have investigated an issue where
if -Djavax.security.jacc.policy.provider=sun.security.provider.PolicyFile
is set, deployment of EJBs fails.

The issue here is that specifying javax.security.jacc.policy.provider
causes the JVM to install a policy, but also means TomEE doesn't install
its policy (org.apache.openejb.core.security.JaccProvider.Policy). TomEE's
policy specifically deals with EJB permissions and delegates to the system
policy for everything else.

I've created a PR to patch this: https://github.com/apache/tomee/pull/476 and
would be grateful for review.

Many thanks

Jon

Reply via email to