Developer Portal

Have a PACL issue in 6.2 - working on completing a hook

I have
portal.security.manager.strategy=liferay
in portal-ext.properties set (and verified via Admin UI)

and in my hook in liferay-plugin-package.properties have
security-manager-enabled=generate

but get no errors and no file created... if I set it to
security-manager-enabled=true

I still get no errors, this is 6.2 GA2
is there some issue with PACL not processing in hooks?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27 mai 2014 11:29

Réponse

Raymond Augé

Rang: Youngling

Publications: 0

Date d'inscription: 7 février 2005

did you enable a security manager in the app server?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27 mai 2014 11:32

Réponse

Barrie Selack

Rang: Youngling

Publications: 0

Date d'inscription: 25 février 2014

Ah... never mind... for to enable security in Tomcat :-(

R: Have a PACL issue in 6.2 -No PACL generation or errors

7 juin 2014 07:51

Réponse

Bradley Wood

Rang: Youngling

Publications: 2

Date d'inscription: 16 novembre 2013

Barrie where did you do that?

Sent from my iPhone with Liferay.com Forums

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

8 juin 2014 08:07

Réponse

Raymond Augé

Rang: Youngling

Publications: 0

Date d'inscription: 7 février 2005

You do that from tomcat's JVM property settings.

Typically that's in bin/setenv.sh with something like:

-Djava.security.manager -Djava.security.policy==$CATALINA_BASE/conf/catalina.policy

(note the double == is deliberate)

inside the catalina.policy file put:

1          grant {
2             permission java.security.AllPermission;
3          };

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10 juin 2014 12:54

Réponse

Bradley Wood

Rang: Youngling

Publications: 2

Date d'inscription: 16 novembre 2013

is this information documented?

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10 juin 2014 13:05

Réponse

Raymond Augé

Rang: Youngling

Publications: 0

Date d'inscription: 7 février 2005

Properly generating a PACL policy is documented here:

https://www.liferay.com/documentation/liferay-portal/6.2/development/-/ai/developing-plugins-with-security-in-mind-liferay-portal-6-2-dev-guide-11-en

Setting up the app server for java security should be documented in the app server documentation.

But in general they are all very close to being identical to above (cept you may point to a policy file which is in a different location).