Uploaded image for project: 'WildFly EJB HTTP Client'
  1. WildFly EJB HTTP Client
  2. WEJBHTTP-18

HttpEJBReceiver fails under a security manager

    XMLWordPrintable

Details

    • Hide 
      cd testsuite/integration/legacy-ejb-client
mvn install -Dtest=EJBClientInterceptorTestCase -Dsecurity.manager
      Show
      cd testsuite/integration/legacy-ejb-client mvn install -Dtest=EJBClientInterceptorTestCase -Dsecurity.manager

    Description

      The RemoteTransactionContext.getInstance() method must be called from within a privileged block.

      The stack trace looks like this:

      java.security.AccessControlException: WFSM000001: Permission check failed (permission "("org.wildfly.common.context.ContextPermission" "org.wildfly.transaction.client.context.remote" "get")" in code source "(vfs:/content/ejb-client-interceptor-test-module.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.ejb-client-interceptor-test-module.jar" from Service Module Loader")
    at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:295)
    at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:192)
    at org.wildfly.common.context.ContextManager.get(ContextManager.java:241)
    at org.wildfly.transaction.client.RemoteTransactionContext.getInstance(RemoteTransactionContext.java:167)
    at org.wildfly.httpclient.ejb.HttpEJBReceiver.<init>(HttpEJBReceiver.java:101)
    at org.wildfly.httpclient.ejb.HttpClientProvider.notifyRegistered(HttpClientProvider.java:44)
    at org.jboss.ejb.client.EJBClientContext.<init>(EJBClientContext.java:275)
    at org.jboss.ejb.client.EJBClientContext$Builder.build(EJBClientContext.java:788)
    at org.jboss.ejb.client.EJBClientContext.withAddedInterceptors(EJBClientContext.java:503)
    ... 65 more

      Attachments

        Issue Links

          causes

          Bug - A problem that impairs or prevents the functions of the product. WFLY-10192 EJBClientInterceptorTestCase fails for HTTP invocation under security manager

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-16087 (7.2.z) WEJBHTTP-18 - HttpEJBReceiver fails under a security manager

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified
          is related to

          Task - Represents a small unit of work that is not end-user facing. WFLY-6542 Fix issues in tests with Security Manager

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Open

          Activity

            People

              sdouglas1@redhat.com Stuart Douglas
              dlloyd@redhat.com David Lloyd
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: