Vista combinada Visión Plana Vista de árbol
toggle
Philippe Tran
Spring-based app with security-manager-enabled on LR 6.2.0 M5
14 de mayo de 2013 2:40
Respuesta

Philippe Tran

Ranking: Youngling

Mensajes: 0

Fecha de incorporación: 22 de enero de 2009

Mensajes recientes

Hi everyone,

I am struggling to make my Spring-based app installed with Liferay 6.2.0 M5 with security-manager-enabled, because of the bean dependency-injection nature of Spring (+ cglib). Moreover, I use logback for logging purposes.

I admit I don't understand very well the security-manager-get-bean-property, security-manager-get-bean-property and class-loader documentation...

Right now, I have 3 kinds of problems:
1. when loading the Spring root context, I am stuck with the Attempted to get protection domain error, because net.sf.cglib.core.ReflectUtils calls Class<T>.getProtectionDomain()
2. when loading the annotated portlet, I got the Attempted to access declared members error because org.springframework.core.annotation.AnnotationUtils use of Class<T>.getDeclaredMethods()
3. lastly, logback use of Class<T>.getProtectionDomain() and Class<T>.getClassLoader() results in Attempted to get protection domain and Attempted to get a class loader errors

My liferay-plugin-package.properties are set as:

security-manager-environment-variables=\
\\*

security-manager-class-loader-reference-ids=\
myportlet,\
myportlet_WAR_myapp

security-manager-get-bean-property=\
net.sf.cglib.core.ReflectUtils,\
org.springframework.core.annotation.AnnotationUtils


But I can't get through... I thought security-manager-get-bean-property would let org.springframework.core.annotation.AnnotationUtils use of Class<T>.getDeclaredMethods(), and security-manager-class-loader-reference-ids would let logback use Class<T>.getClassLoader().

Do you guys have any idea about this ?

Thanks in advance,
Philippe
David H Nebinger
RE: Spring-based app with security-manager-enabled on LR 6.2.0 M5
14 de mayo de 2013 5:32
Respuesta

David H Nebinger

Ranking: Youngling

Mensajes: 44

Fecha de incorporación: 1 de septiembre de 2006

Mensajes recientes

Use the generator option, this will help identify the right rules you need to have.

If I remember correctly, there's a bug open on PACL and annotations, so there may still be a problem there that will block you...
Philippe Tran
RE: Spring-based app with security-manager-enabled on LR 6.2.0 M5
14 de mayo de 2013 6:55
Respuesta

Philippe Tran

Ranking: Youngling

Mensajes: 0

Fecha de incorporación: 22 de enero de 2009

Mensajes recientes

Hi David,

I have tried the "generate" option, but nothing comes out :-(
Philippe

Forums

To access the Developer Forum, please login to your Liferay.com account if you are already a registered developer or register to become a developer.