Uploaded image for project: 'EJB 3.0'
  1. EJB 3.0
  2. EJBTHREE-1586

ClassHelper missing privileged blocks

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 1.0.0-Beta7
    • None
    • None
    • None

      Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
      at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
      at java.security.AccessController.checkPermission(AccessController.java:427)
      at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
      at java.lang.SecurityManager.checkMemberAccess(SecurityManager.java:1662)
      at java.lang.Class.checkMemberAccess(Class.java:2125)
      at java.lang.Class.getDeclaredMethods(Class.java:1762)
      at org.jboss.ejb3.interceptors.lang.ClassHelper.populateAllMethods(ClassHelper.java:216)
      at org.jboss.ejb3.interceptors.lang.ClassHelper.populateAllMethods(ClassHelper.java:215)
      at org.jboss.ejb3.interceptors.lang.ClassHelper.getAllMethods(ClassHelper.java:86)
      at org.jboss.ejb3.interceptors.aop.InjectInterceptorsFactory.createPerJoinpoint(InjectInterceptorsFactory.java:108)
      at org.jboss.aop.microcontainer.beans.DelegatingBeanAspectFactory.createPerJoinpoint(DelegatingBeanAspectFactory.java:112)

      ClassHelper:216, class.getDeclaredMethods needs to be done in a priv block.

          1.
          		 SessionSpecContainer missing a privileged block Sub-task Closed Critical Anil Saldanha (Inactive)
          2.
          		 ClassHelper needs privileged blocks for all sensistive operations Sub-task Resolved Major Andrew Rubinger (Inactive)
          3.
          		 Insecure access to getClassLoader in SerializableMethod Sub-task Resolved Major Andrew Rubinger (Inactive)
          4.
          		 Setting permissions in Ejb3AuthenticationInterceptorv2 needs to be done in doPrivileged Sub-task Resolved Major Andrew Rubinger (Inactive)

              arubinge@redhat.com Andrew Rubinger (Inactive)
              anil.saldhana Anil Saldanha (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: