System.proerties setting to set xtream(1.4.20) permission Globaly in Apache karaf 4.3.7

[Chandan Singh]

Hi All ,

Any idea how to set  permissions for xtream packages  to avoid the
forbidden exception as shown
below


Caused by: com.thoughtworks.xstream.security.ForbiddenClassException:
com.xx.xx.xx.parser.MyClass

        at
com.thoughtworks.xstream.security.NoTypePermission.allows(NoTypePermission.java:26)
~[!/:?]

        at
com.thoughtworks.xstream.mapper.SecurityMapper.realClass(SecurityMapper.java:74)
~[!/:?]

        at
com.thoughtworks.xstream.mapper.MapperWrapper.realClass(MapperWrapper.java:125)
~[!/:?]

        at
com.thoughtworks.xstream.mapper.CachingMapper.realClass(CachingMapper.java:47)
~[!/:?]

        at
com.thoughtworks.xstream.core.util.HierarchicalStreams.readClassType(HierarchicalStreams.java:29)
~[!/:?]

        at
com.thoughtworks.xstream.core.TreeUnmarshaller.start(TreeUnmarshaller.java:135)
~[!/:?]

        at
com.thoughtworks.xstream.core.AbstractTreeMarshallingStrategy.unmarshal(AbstractTreeMarshallingStrategy.java:32)
~[!/:?]

        at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1464)
~[!/:?]

        at com.thoughtworks.xstream.XStream.unmarshal(XStream.java:1441)
~[!/:?]

        at com.thoughtworks.xstream.XStream.fromXML(XStream.java:1321)
~[!/:?]

        at com.thoughtworks.xstream.XStream.fromXML(XStream.java:1312)
~[!/:?]


I had the below seeting in  pas Karaf  System.properties  and it used to
work in earlier  versions  .


org.apache.camel.xstream.permissions=com.xx.xx.**,java.lang.*,java.util.**
*com.thoughtworks.xstream.permissions=com.xx.xx.*,java.lang.*,java.util.*  *


*Please advice if the there is any change in Syntax or  any other config
required ? *


*Regards*
*Chandan*