You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ignite.apache.org by Nico <ni...@neoxam.com> on 2021/04/22 11:17:46 UTC

AccessControlException

Hi,

I'm using Ignite in embedded mode, ignite sandbox is off. I'm getting the
following exception:
Caused by: java.security.AccessControlException: access denied
("java.util.PropertyPermission" "IGNITE_DEFAULT_DISK_PAGE_COMPRESSION"
"read")
at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
at java.security.AccessController.checkPermission(AccessController.java:884)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1294)
at java.lang.System.getProperty(System.java:717)
at
org.apache.ignite.IgniteSystemProperties.getString(IgniteSystemProperties.java:1385)
at
org.apache.ignite.IgniteSystemProperties.getEnum(IgniteSystemProperties.java:1362)
at
org.apache.ignite.IgniteSystemProperties.getEnum(IgniteSystemProperties.java:1342)
at
org.apache.ignite.configuration.CacheConfiguration.<init>(CacheConfiguration.java:429)
at
org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateConfigFromTemplate(GridCacheProcessor.java:3377)
at
org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateFromTemplate(GridCacheProcessor.java:3280)
at
org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateFromTemplate(GridCacheProcessor.java:3258)
at
org.apache.ignite.internal.IgniteKernal.getOrCreateCache(IgniteKernal.java:3575)
at
lib.system.aggregation.event.consumer.DefaultAggregationEventConsumer.getNodeDataCache(DefaultAggregationEventConsumer.java:217)

My application use the -Djava.security.policy option, which points to a file
granting all the permissions. Any idea of what could go wrong? 
Thanks and Regards,
Nicolas



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/

Re: AccessControlException

Posted by Ilya Kasnacheev <il...@gmail.com>.
Hello!

Obviously, you need to grant to all Ignite code permission to read any
system properties.

Obviously, granting all permissions didn't work in your case. I'm not sure
why.

Regards,
-- 
Ilya Kasnacheev


чт, 22 апр. 2021 г. в 14:33, Nico <ni...@neoxam.com>:

> Hi,
>
> I'm using Ignite in embedded mode, ignite sandbox is off. I'm getting the
> following exception:
> Caused by: java.security.AccessControlException: access denied
> ("java.util.PropertyPermission" "IGNITE_DEFAULT_DISK_PAGE_COMPRESSION"
> "read")
> at
>
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
> at
> java.security.AccessController.checkPermission(AccessController.java:884)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
> at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1294)
> at java.lang.System.getProperty(System.java:717)
> at
>
> org.apache.ignite.IgniteSystemProperties.getString(IgniteSystemProperties.java:1385)
> at
>
> org.apache.ignite.IgniteSystemProperties.getEnum(IgniteSystemProperties.java:1362)
> at
>
> org.apache.ignite.IgniteSystemProperties.getEnum(IgniteSystemProperties.java:1342)
> at
>
> org.apache.ignite.configuration.CacheConfiguration.<init>(CacheConfiguration.java:429)
> at
>
> org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateConfigFromTemplate(GridCacheProcessor.java:3377)
> at
>
> org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateFromTemplate(GridCacheProcessor.java:3280)
> at
>
> org.apache.ignite.internal.processors.cache.GridCacheProcessor.getOrCreateFromTemplate(GridCacheProcessor.java:3258)
> at
>
> org.apache.ignite.internal.IgniteKernal.getOrCreateCache(IgniteKernal.java:3575)
> at
>
> lib.system.aggregation.event.consumer.DefaultAggregationEventConsumer.getNodeDataCache(DefaultAggregationEventConsumer.java:217)
>
> My application use the -Djava.security.policy option, which points to a
> file
> granting all the permissions. Any idea of what could go wrong?
> Thanks and Regards,
> Nicolas
>
>
>
> --
> Sent from: http://apache-ignite-users.70518.x6.nabble.com/
>

Re: AccessControlException

Posted by Ilya Kasnacheev <il...@gmail.com>.
Hello!

I guess this is what JVM creates for us.

If you expect that Ignite would have dedicated support for security policy:
it doesn't.

Regards,
-- 
Ilya Kasnacheev


чт, 22 апр. 2021 г. в 16:58, Nico <ni...@neoxam.com>:

> More info: it looks like the threads that are created are of type
> InnocuousForkJoinWorkerThread, which means without permissions.
>
>
>
> --
> Sent from: http://apache-ignite-users.70518.x6.nabble.com/
>

Re: AccessControlException

Posted by Nico <ni...@neoxam.com>.
More info: it looks like the threads that are created are of type
InnocuousForkJoinWorkerThread, which means without permissions.



--
Sent from: http://apache-ignite-users.70518.x6.nabble.com/