You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "Shreyes Seshasai (JIRA)" <ji...@apache.org> on 2006/07/11 00:07:29 UTC

[jira] Created: (AXIS2-884) SecurityException thrown when run from an applet

SecurityException thrown when run from an applet
------------------------------------------------

         Key: AXIS2-884
         URL: http://issues.apache.org/jira/browse/AXIS2-884
     Project: Apache Axis 2.0 (Axis2)
        Type: Bug

  Components: deployment  
    Reporter: Shreyes Seshasai


Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().

A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.

Known affected files:
org.apache.axis2.deployment.FileSystemConfigurator.java 
org.apache.axis2.deployment.RepositoryListener.java

Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


[jira] Commented: (AXIS2-884) SecurityException thrown when run from an applet

Posted by "Davanum Srinivas (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/AXIS2-884?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12508654 ] 

Davanum Srinivas commented on AXIS2-884:
----------------------------------------

You will need to sign the jars. Sorry, won't fix.

thanks,
dims

> SecurityException thrown when run from an applet
> ------------------------------------------------
>
>                 Key: AXIS2-884
>                 URL: https://issues.apache.org/jira/browse/AXIS2-884
>             Project: Axis 2.0 (Axis2)
>          Issue Type: Bug
>          Components: deployment
>            Reporter: Shreyes Seshasai
>            Assignee: Deepal Jayasinghe
>
> Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().
> A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.
> Known affected files:
> org.apache.axis2.deployment.FileSystemConfigurator.java 
> org.apache.axis2.deployment.RepositoryListener.java
> Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


[jira] Commented: (AXIS2-884) SecurityException thrown when run from an applet

Posted by "Ming Cheung (JIRA)" <ji...@apache.org>.
    [ http://issues.apache.org/jira/browse/AXIS2-884?page=comments#action_12429124 ] 
            
Ming Cheung commented on AXIS2-884:
-----------------------------------

I just wonder what type of exception you have from these 2 classes. Could you/someone please cut and paste the failure call stacks here? 

> SecurityException thrown when run from an applet
> ------------------------------------------------
>
>                 Key: AXIS2-884
>                 URL: http://issues.apache.org/jira/browse/AXIS2-884
>             Project: Apache Axis 2.0 (Axis2)
>          Issue Type: Bug
>          Components: deployment
>            Reporter: Shreyes Seshasai
>
> Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().
> A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.
> Known affected files:
> org.apache.axis2.deployment.FileSystemConfigurator.java 
> org.apache.axis2.deployment.RepositoryListener.java
> Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


[jira] Updated: (AXIS2-884) SecurityException thrown when run from an applet

Posted by "Davanum Srinivas (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/AXIS2-884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Davanum Srinivas updated AXIS2-884:
-----------------------------------

    Assignee: Deepal Jayasinghe

> SecurityException thrown when run from an applet
> ------------------------------------------------
>
>                 Key: AXIS2-884
>                 URL: https://issues.apache.org/jira/browse/AXIS2-884
>             Project: Axis 2.0 (Axis2)
>          Issue Type: Bug
>          Components: deployment
>            Reporter: Shreyes Seshasai
>         Assigned To: Deepal Jayasinghe
>
> Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().
> A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.
> Known affected files:
> org.apache.axis2.deployment.FileSystemConfigurator.java 
> org.apache.axis2.deployment.RepositoryListener.java
> Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


[jira] Commented: (AXIS2-884) SecurityException thrown when run from an applet

Posted by "Deepal Jayasinghe (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/AXIS2-884?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12467800 ] 

Deepal Jayasinghe commented on AXIS2-884:
-----------------------------------------

How about submiting a patch :)

> SecurityException thrown when run from an applet
> ------------------------------------------------
>
>                 Key: AXIS2-884
>                 URL: https://issues.apache.org/jira/browse/AXIS2-884
>             Project: Axis 2.0 (Axis2)
>          Issue Type: Bug
>          Components: deployment
>            Reporter: Shreyes Seshasai
>
> Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().
> A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.
> Known affected files:
> org.apache.axis2.deployment.FileSystemConfigurator.java 
> org.apache.axis2.deployment.RepositoryListener.java
> Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org


[jira] Resolved: (AXIS2-884) SecurityException thrown when run from an applet

Posted by "Davanum Srinivas (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/AXIS2-884?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Davanum Srinivas resolved AXIS2-884.
------------------------------------

    Resolution: Won't Fix

> SecurityException thrown when run from an applet
> ------------------------------------------------
>
>                 Key: AXIS2-884
>                 URL: https://issues.apache.org/jira/browse/AXIS2-884
>             Project: Axis 2.0 (Axis2)
>          Issue Type: Bug
>          Components: deployment
>            Reporter: Shreyes Seshasai
>            Assignee: Deepal Jayasinghe
>
> Java applets are given fewer security privileges than stand alone applications by default.  When trying to run an Axis2 client from a java applet, it may not have all of the privileges required by some of the calls in the Axis2 code, causing SecurityExceptions to be thrown.  Examples of these calls are System.getProperty() and File.listFiles().
> A suggested fix would be to enclose these calls in try/catch(SecurityException) blocks, and assign default values to the variables which failed to be set.
> Known affected files:
> org.apache.axis2.deployment.FileSystemConfigurator.java 
> org.apache.axis2.deployment.RepositoryListener.java
> Adding the try/catch blocks here allowed the applet to start and function correctly.  However, the problem probably exists in other locations in the code too.  I was only using limited functionality (no additional modules or databinding). Since applets cannot read files from the file system, I'm unsure how this affects other axis2 functionality.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-dev-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-dev-help@ws.apache.org