Hi, Iam afraid security stuff is undocumented but try this:
grant permissions in policy configuration, I see hibernate doe's not have
permissions to read system properties:
>at
java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1259)
>         at java.lang.System.getProperties(System.java:500)
>         at cirrus.hibernate.Environment.<clinit>(Environment.java:298)
>
It needs reflect permission too ( "setAccessable", "getDeclaredMethod",
... ).
hibernate doe's not use Privileged actions, you will need "global" settings
and I think security stuff will decrease performance.



----- Original Message -----
From: "Renato" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, December 24, 2002 5:54 PM
Subject: [Hibernate] Problems with hibernate.jar on a shared webapp


>
> Hi,
>
> I'd like to report a problem regarding a shared webapp environment ( on
Tomcat 4.1.x ). Since we do not allow users to change the System.properties
environment, when somebody puts hibernate.jar on a webapp we got a security
constraint violation:
>
> 2002-12-24 12:43:03 StandardContext[/teste]: Servlet /teste threw load()
exception
> javax.servlet.ServletException: Servlet.init() for servlet startupservlet
threw exception
>         at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:95
2)
>         at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
>         at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3341)
>         at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3535)
>         at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)
>         at
org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
>         at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)
>         at
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347)
>         at
org.apache.catalina.core.StandardService.start(StandardService.java:497)
>         at
org.apache.catalina.core.StandardServer.start(StandardServer.java:2189)
>         at org.apache.catalina.startup.Catalina.start(Catalina.java:510)
>         at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
>         at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
>         at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:324)
>         at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
> ----- Root Cause -----
> java.lang.ExceptionInInitializerError
>         at
cirrus.hibernate.impl.DatastoreImpl.buildSessionFactory(DatastoreImpl.java:3
79)
>         at
cirrus.hibernate.impl.DatastoreImpl.buildSessionFactory(DatastoreImpl.java:3
69)
>         at
br.com.grafset.business.ObjectHandler.buildSessionFactory(ObjectHandler.java
:48)
>         at
br.com.grafset.StartupServlet.initPersistence(StartupServlet.java:49)
>         at br.com.grafset.StartupServlet.init(StartupServlet.java:29)
>         at javax.servlet.GenericServlet.init(GenericServlet.java:258)
>         at
org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:92
4)
>         at
org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
>         at
org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:
3341)
>         at
org.apache.catalina.core.StandardContext.start(StandardContext.java:3535)
>         at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)
>         at
org.apache.catalina.core.StandardHost.start(StandardHost.java:738)
>         at
org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1188)
>         at
org.apache.catalina.core.StandardEngine.start(StandardEngine.java:347)
>         at
org.apache.catalina.core.StandardService.start(StandardService.java:497)
>         at
org.apache.catalina.core.StandardServer.start(StandardServer.java:2189)
>         at org.apache.catalina.startup.Catalina.start(Catalina.java:510)
>         at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
>         at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39
)
>         at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl
.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:324)
>         at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
> Caused by: java.security.AccessControlException: access denied
(java.util.PropertyPermission * read,write)
>         at
java.security.AccessControlContext.checkPermission(AccessControlContext.java
:270)
>         at
java.security.AccessController.checkPermission(AccessController.java:401)
>         at
java.lang.SecurityManager.checkPermission(SecurityManager.java:542)
>         at
java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1259)
>         at java.lang.System.getProperties(System.java:500)
>         at cirrus.hibernate.Environment.<clinit>(Environment.java:298)
>
>
> Is it really necessary to modify the System.Properties ? If it is, is
there any workaround to this problem, so somebody could use hibernate on a
shared environment ?
>
> Thanks for your time
>
> Renato.
>
>
>
> ---------------------------------
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
hibernate-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/hibernate-devel

Reply via email to