Developer Portal

Have a PACL issue in 6.2 - working on completing a hook

I have
portal.security.manager.strategy=liferay
in portal-ext.properties set (and verified via Admin UI)

and in my hook in liferay-plugin-package.properties have
security-manager-enabled=generate

but get no errors and no file created... if I set it to
security-manager-enabled=true

I still get no errors, this is 6.2 GA2
is there some issue with PACL not processing in hooks?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27. Mai 2014 11:29

Antwort

Raymond Augé

Rang: Youngling

Nachrichten: 0

Eintrittsdatum: 7. Februar 2005

did you enable a security manager in the app server?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27. Mai 2014 11:32

Antwort

Barrie Selack

Rang: Youngling

Nachrichten: 0

Eintrittsdatum: 25. Februar 2014

Ah... never mind... for to enable security in Tomcat :-(

R: Have a PACL issue in 6.2 -No PACL generation or errors

7. Juni 2014 07:51

Antwort

Bradley Wood

Rang: Youngling

Nachrichten: 2

Eintrittsdatum: 16. November 2013

Barrie where did you do that?

Sent from my iPhone with Liferay.com Forums

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

8. Juni 2014 08:07

Antwort

Raymond Augé

Rang: Youngling

Nachrichten: 0

Eintrittsdatum: 7. Februar 2005

You do that from tomcat's JVM property settings.

Typically that's in bin/setenv.sh with something like:

-Djava.security.manager -Djava.security.policy==$CATALINA_BASE/conf/catalina.policy

(note the double == is deliberate)

inside the catalina.policy file put:

1          grant {
2             permission java.security.AllPermission;
3          };

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10. Juni 2014 12:54

Antwort

Bradley Wood

Rang: Youngling

Nachrichten: 2

Eintrittsdatum: 16. November 2013

is this information documented?

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10. Juni 2014 13:05

Antwort

Raymond Augé

Rang: Youngling

Nachrichten: 0

Eintrittsdatum: 7. Februar 2005

Properly generating a PACL policy is documented here:

https://www.liferay.com/documentation/liferay-portal/6.2/development/-/ai/developing-plugins-with-security-in-mind-liferay-portal-6-2-dev-guide-11-en

Setting up the app server for java security should be documented in the app server documentation.

But in general they are all very close to being identical to above (cept you may point to a policy file which is in a different location).