Re: Granting permission to a single application-supplied JAR

2018-03-28 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 George, On 3/27/18 8:33 PM, George S. wrote: > One thing that has bitten me is that the entire stack/call chain > is examined, not just permissions on a specific piece of code as > you would expect. This comes into play when you're trying to make >

Re: Granting permission to a single application-supplied JAR

2018-03-27 Thread George S.
Chris, One thing that has bitten me is that the entire stack/call chain is examined, not just permissions on a specific piece of code as you would expect. This comes into play when you're trying to make calls into trusted code from a JSP. My experience has been that JSPs are not trusted.

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Konstantin Kolinko
2018-03-23 1:32 GMT+03:00 Christopher Schultz : > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Konstantin, > > Thanks for the reply. > > On 3/22/18 6:12 PM, Konstantin Kolinko wrote: >> 2018-03-23 0:39 GMT+03:00 Christopher Schultz >>

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Konstantin, Thanks for the reply. On 3/22/18 6:12 PM, Konstantin Kolinko wrote: > 2018-03-23 0:39 GMT+03:00 Christopher Schultz > : >> All, >> >> I'm working on getting my application working under a >>

Re: Granting permission to a single application-supplied JAR

2018-03-22 Thread Konstantin Kolinko
2018-03-23 0:39 GMT+03:00 Christopher Schultz : > All, > > I'm working on getting my application working under a SecurityManager. > It's actually been a little less painful than I thought it would be. > > I'm using Solr for some index searching. I'm using SolrJ for

Granting permission to a single application-supplied JAR

2018-03-22 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 All, I'm working on getting my application working under a SecurityManager. It's actually been a little less painful than I thought it would be. I'm using Solr for some index searching. I'm using SolrJ for the library to communicate via HTTP to a