Hi, Iam afraid security stuff is undocumented but try this: grant permissions in policy configuration, I see hibernate doe's not have permissions to read system properties: >at java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1259) > at java.lang.System.getProperties(System.java:500) > at cirrus.hibernate.Environment.<clinit>(Environment.java:298) > It needs reflect permission too ( "setAccessable", "getDeclaredMethod", ... ). hibernate doe's not use Privileged actions, you will need "global" settings and I think security stuff will decrease performance.
----- Original Message ----- From: "Renato" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, December 24, 2002 5:54 PM Subject: [Hibernate] Problems with hibernate.jar on a shared webapp > > Hi, > > I'd like to report a problem regarding a shared webapp environment ( on Tomcat 4.1.x ). Since we do not allow users to change the System.properties environment, when somebody puts hibernate.jar on a webapp we got a security constraint violation: > > 2002-12-24 12:43:03 StandardContext[/teste]: Servlet /teste threw load() exception > javax.servlet.ServletException: Servlet.init() for servlet startupservlet threw exception > at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:95 2) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813) > at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java: 3341) > at org.apache.catalina.core.StandardContext.start(StandardContext.java:3535) > at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188) > at org.apache.catalina.core.StandardHost.start(StandardHost.java:738) > at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188) > at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347) > at org.apache.catalina.core.StandardService.start(StandardService.java:497) > at org.apache.catalina.core.StandardServer.start(StandardServer.java:2189) > at org.apache.catalina.startup.Catalina.start(Catalina.java:510) > at org.apache.catalina.startup.Catalina.execute(Catalina.java:400) > at org.apache.catalina.startup.Catalina.process(Catalina.java:180) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39 ) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl .java:25) > at java.lang.reflect.Method.invoke(Method.java:324) > at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203) > ----- Root Cause ----- > java.lang.ExceptionInInitializerError > at cirrus.hibernate.impl.DatastoreImpl.buildSessionFactory(DatastoreImpl.java:3 79) > at cirrus.hibernate.impl.DatastoreImpl.buildSessionFactory(DatastoreImpl.java:3 69) > at br.com.grafset.business.ObjectHandler.buildSessionFactory(ObjectHandler.java :48) > at br.com.grafset.StartupServlet.initPersistence(StartupServlet.java:49) > at br.com.grafset.StartupServlet.init(StartupServlet.java:29) > at javax.servlet.GenericServlet.init(GenericServlet.java:258) > at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:92 4) > at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813) > at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java: 3341) > at org.apache.catalina.core.StandardContext.start(StandardContext.java:3535) > at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188) > at org.apache.catalina.core.StandardHost.start(StandardHost.java:738) > at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188) > at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347) > at org.apache.catalina.core.StandardService.start(StandardService.java:497) > at org.apache.catalina.core.StandardServer.start(StandardServer.java:2189) > at org.apache.catalina.startup.Catalina.start(Catalina.java:510) > at org.apache.catalina.startup.Catalina.execute(Catalina.java:400) > at org.apache.catalina.startup.Catalina.process(Catalina.java:180) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39 ) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl .java:25) > at java.lang.reflect.Method.invoke(Method.java:324) > at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203) > Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission * read,write) > at java.security.AccessControlContext.checkPermission(AccessControlContext.java :270) > at java.security.AccessController.checkPermission(AccessController.java:401) > at java.lang.SecurityManager.checkPermission(SecurityManager.java:542) > at java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1259) > at java.lang.System.getProperties(System.java:500) > at cirrus.hibernate.Environment.<clinit>(Environment.java:298) > > > Is it really necessary to modify the System.Properties ? If it is, is there any workaround to this problem, so somebody could use hibernate on a shared environment ? > > Thanks for your time > > Renato. > > > > --------------------------------- > Do you Yahoo!? > Yahoo! Mail Plus - Powerful. Affordable. Sign up now ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ hibernate-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/hibernate-devel