Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-8328

RAR endpoint creation requires too much permission from deployment when security manager is used

XMLWordPrintable

    • Hide

      Run test and remove there `RuntimePermission`s from method defining the deployment

      ./integration-tests.sh clean install -Dts.noSmoke -Dts.basic -Dtest=DynamicMessageListenerTestCase -Dsecurity.manager
      Show
      Run test and remove there `RuntimePermission`s from method defining the deployment ./integration-tests.sh clean install -Dts.noSmoke -Dts.basic -Dtest=DynamicMessageListenerTestCase -Dsecurity.manager

      When RAR is deployed the EJB endpoint creation requires too much RuntimePermission to be defined in deployment itself. It's needed to define

      new RuntimePermission("accessDeclaredMembers")
new RuntimePermission("defineClassInPackage.*")
new RuntimePermission("getClassLoader")

      These permissions should not be required as are needed by internal endpoind creation operations launched from org.jboss.as.ejb3.inflow.JBossMessageEndpointFactory

      Stacktraces of security manager exceptions are added in attachment.

        1. getClassLoader-permission-stacktrace.txt
          6 kB
          Ondrej Chaloupka

              ochaloup@redhat.com Ondrej Chaloupka (Inactive)
              ochaloup@redhat.com Ondrej Chaloupka (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: