AccessControlException with Wicket on Google App Engine (GAE)

[A. Maza]

Hi,

I've encountered now (and have seen reported by other users) several 
different cases where Wicket on GAE throws an AccessControlException 
when serializing an object to a byte array.

Although this is clearly an issue of GAE permissions, I would like to 
ask if someone could give me a hint, why this exception occurs or if 
someone may know a workaround. I've already filed an issue for this on 
the GAE project site [1] and would forward any findings of the wicket 
community.

Below I include snippets of two different stacktraces.

Thanks in advance,
andr


<snip1>

java.security.AccessControlException: access denied 
(java.io.SerializablePermission enableSubclassImplementation)
	at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
	at 
java.security.AccessController.checkPermission(AccessController.java:546)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
	at 
com.google.appengine.tools.development.DevAppServerFactory$CustomSecurityManager.checkPermission(DevAppServerFactory.java:151)
        at java.io.ObjectOutputStream.<init>(ObjectOutputStream.java:253)
	at 
org.apache.wicket.util.io.IObjectStreamFactory$DefaultObjectStreamFactory$2.<init>(IObjectStreamFactory.java:150)
	at 
org.apache.wicket.util.io.IObjectStreamFactory$DefaultObjectStreamFactory.newObjectOutputStream(IObjectStreamFactory.java:114)
        at 
org.apache.wicket.util.lang.Objects.objectToByteArray(Objects.java:1111)
	at 
org.apache.wicket.protocol.http.pagestore.AbstractPageStore.serializePage(AbstractPageStore.java:203)

</snip1>

<snip2>
(java.io.SerializablePermission enableSubstitution)
        at java.security.AccessControlContext.checkPermission
(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission
(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:
532)
        at com.google.appengine.tools.development.DevAppServerFactory
$CustomSecurityManager.checkPermission(DevAppServerFactory.java:122)
        at java.io.ObjectOutputStream.enableReplaceObject
(ObjectOutputStream.java:556)
        at org.apache.wicket.util.lang.Objects
$ReplaceObjectOutputStream.<init>(Objects.java:179)
        at org.apache.wicket.util.lang.Objects
$ReplaceObjectOutputStream.<init>(Objects.java:170)
        at 
org.apache.wicket.util.lang.Objects.cloneModel(Objects.java:442)
        at 
org.apache.wicket.version.undo.ModelChange.<init>(ModelChange.java:
103)
        at 
org.apache.wicket.version.undo.ChangeList.componentModelChanging
(ChangeList.java:64)
        at
org.apache.wicket.version.undo.UndoPageVersionManager.componentModelChangin­g 

(UndoPageVersionManager.java:123)
        at org.apache.wicket.Page.componentModelChanging(Page.java:1555)
        at org.apache.wicket.Component.modelChanging(Component.java:2197)
        at 
org.apache.wicket.Component.setDefaultModelObject(Component.java:
3020)
        at
org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab
(TabbedPanel.java:346)
        at 
org.apache.wicket.extensions.markup.html.tabs.TabbedPanel$5.onClick
(TabbedPanel.java:327)
        at 
org.apache.wicket.markup.html.link.Link.onLinkClicked(Link.java:
221)




</snip2>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org
For additional commands, e-mail: users-h...@wicket.apache.org