Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-4864

JSP in web application doesn't get VFS-based security permissions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 10.0.0.Alpha6
    • 10.0.0.Alpha4
    • Web (Undertow)
    • None

      Permissions granted to web applications (using vfs:/... codebase) are not available in JSPs.

      After deploying the test app, a call to http://localhost:8080/read-props/ gives following error:
      Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.util.PropertyPermission" "java.home" "read")" in code source "(file:/Users/spyrkob/workspaces/set/servers/wildfly-10.x/wildfly-10.0.0.Alpha5-SNAPSHOT/standalone/tmp/read-props.war/ <no signer certificates>)" of "org.apache.jasper.servlet.JasperLoader@3cae09bb")
      at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:270)
      at org.wildfly.security.manager.WildFlySecurityManager.checkPropertyAccess(WildFlySecurityManager.java:493)
      at java.lang.System.getProperty(System.java:714)
      at org.apache.jsp.index_jsp._jspService(index_jsp.java:95)
      at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
      at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
      at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:433)
      ... 33 more

        1. security.policy
          0.8 kB
        2. read-props.war
          2 kB

              tomazcerar Tomaž Cerar (Inactive)
              spyrkob Bartosz Spyrko-Smietanko
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: