This is not useful information I have read this.

It does not answer my specific question. Is it or is it no wrong for a read request via java.lang.System.getProperties to trigger an access request for both read and write permissions?


Konstantin Kolinko wrote:
2009/12/23 Mike Power <mpo...@alumni.calpoly.edu>:
I am not sure if I am reading the stack trace right.  I have a war that
is trying to read its configuration from the system.properties.

It seems that tomcat6 is apply read write checks on calls to
java.lang.System.getProperties.  Am I observing the details correctly?
That seems to be the wrong permission check to make as a result the
application can not initialized.

Caused by: java.security.AccessControlException: access denied
(java.util.PropertyPermission * read,write)
      at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:342)
      at
java.security.AccessController.checkPermission(AccessController.java:553)
      at
java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
      at
java.lang.SecurityManager.checkPropertiesAccess(SecurityManager.java:1269)
      at java.lang.System.getProperties(System.java:599)
      at
org.sonatype.nexus.web.PlexusContainerConfigurationUtils.buildContext(PlexusContainerConfigurationUtils.java:93)


Start reading here:
http://tomcat.apache.org/tomcat-6.0-doc/security-manager-howto.html

Also
http://java.sun.com/javase/technologies/security/index.jsp
http://java.sun.com/javase/6/docs/technotes/guides/security/PolicyFiles.html

Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


Reply via email to