[jira] Updated: (TUSCANY-2030) Java 2 security

["Dan Becker (JIRA)" <tu...@ws.apache.org>]

     [ https://issues.apache.org/jira/browse/TUSCANY-2030?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Dan Becker updated TUSCANY-2030:
--------------------------------

    Attachment: TUSCANY-2030.patch

This patch when used in conjunction with fixes for TUSCANY-2108 and TUSCANY-2237 allow the Tuscany runtime to run under WAS 7.0 plus SOA FeP with Java 2 security on. However, there are still some security errors in the WebSphere code, which prevents the calculator sample from running error free.

> Java 2 security
> ---------------
>
>                 Key: TUSCANY-2030
>                 URL: https://issues.apache.org/jira/browse/TUSCANY-2030
>             Project: Tuscany
>          Issue Type: New Feature
>    Affects Versions: Java-SCA-1.0.1
>            Reporter: Greg Dritschler
>             Fix For: Java-SCA-Next
>
>         Attachments: TUSCANY-2030.patch
>
>
> In environments where Java 2 security is enabled, an AccessControlException may occur in Tuscany code even though it has privileges to perform the action, because there is code on the call stack that does not have such privileges.  doPrivileged calls must be used around such actions.
> Here is an example of a failure.  There are undoubtedly others.
> java.security.AccessControlException: Access denied (java.lang.RuntimePermission getClassLoader)
> 	at java.security.AccessController.checkPermission(AccessController.java:104)
> 	at java.lang.SecurityManager.checkPermission(SecurityManager.java:547)
> 	at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:189)
> 	at java.lang.Class.getClassLoader(Class.java:234)
> 	at org.apache.tuscany.sca.core.invocation.JDKProxyFactory.createProxy(JDKProxyFactory.java:64)
> 	at org.apache.tuscany.sca.core.invocation.DefaultProxyFactoryExtensionPoint.createProxy(DefaultProxyFactoryExtensionPoint.java:105)
> 	at org.apache.tuscany.sca.core.context.CallableReferenceImpl.getInstance(CallableReferenceImpl.java:154)
> 	at org.apache.tuscany.sca.core.context.CallableReferenceImpl.getService(CallableReferenceImpl.java:162)
> 	at org.apache.tuscany.sca.host.embedded.impl.EmbeddedSCADomain.getService(EmbeddedSCADomain.java:138)
> 	at com.ibm.ws.soa.sca.runtime.impl.SimpleCompositeContextImpl.locateService(SimpleCompositeContextImpl.java:86)
> 	at com.ibm._jsp._Calculator._jspService(_Calculator.java:96)

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.