Issue with Security Manager

[Dzmitry Shaparau, modificado 11 Anos atrás.]

Hi All,

I enabled Security Manager in my plugin and now I see very strange logs such as:
14:43:16,017 WARN [http-bio-8080-exec-71][RuntimeChecker:256] Attempted to access declared members
14:43:16,054 WARN [http-bio-8080-exec-71][ReferenceRegistry:42] Not allowed to get field _service for class ...the name of my service class Util....

The second problem is that in some cases my inter-portlet communication fails with error:
14:49:45,942 WARN [http-bio-8080-exec-74][RuntimeChecker:256] Attempted to access declared members
Oct 30, 2012 2:49:45 PM org.apache.catalina.core.ApplicationDispatcher invoke
SEVERE: Servlet.service() for servlet twostepauthconfig Servlet threw exception
java.lang.SecurityException: Attempted to access declared members
at com.liferay.portal.security.pacl.checker.BaseChecker.throwSecurityException(BaseChecker.java:259)
at com.liferay.portal.security.pacl.checker.RuntimeChecker.checkPermission(RuntimeChecker.java:71)

Could you please advise me which property should I add to liferay-plagin-package.properties?

[Dzmitry Shaparau, modificado 11 Anos atrás.]

I cauth the source of the problem.

It is in usage of org.codehaus.jackson.map.ObjectMapper, i.e.

ObjectMapper objectMapper = new ObjectMapper();

In this case BaseReflectChecker is called for sun.reflect.annotation.AnnotationType. And it does not support it and returns "false".

Looks like a bug.

Do we have LR people on the forum?

[Florencia Gadea, modificado 11 Anos atrás.]

Hi Dzmitry,

Did you find the solution?

We have the same problem.

Regards,

Flor.

[Dzmitry Shaparau, modificado 11 Anos atrás.]

Hi Florencia,

The issue is solved in 6.2.0 CE
you can track it on https://jira.portletfaces.org/browse/LPS-30769

[Florencia Gadea, modificado 11 Anos atrás.]

Ok, thanks.

[James Falkner, modificado 11 Anos atrás.]

Will also be in 6.1 CE GA3!

[Florencia Gadea, modificado 11 Anos atrás.]

That's great news James!!

Do you know where I can download the patch for this? (for the CE)

Regards,

Flor.

[James Falkner, modificado 11 Anos atrás.]

Florencia Gadea:

That's great news James!!

Do you know where I can download the patch for this? (for the CE)

Regards,

Flor.

Here's the patch. But this is against master (6.2.x). If you want this for 6.1 CE you may need to backport it (or wait for GA3).

[Florencia Gadea, modificado 11 Anos atrás.]

Thanks!! I will take a look at it.

What we are doing at Rotterdam CS is applying all possible patches (related to PACL), because that is the only way we know for sure that our plugins will be PACL-error-free in GA3.

Regards,

Flor.

[Juan Gonzalez P, modificado 11 Anos atrás.]

Hi James,

Whenever there is a road map (in JIRA) for 6.1.1 GA3, please tell in forums.

Would be great to include issues from here (at least the most important ones):

https://www.lcepatchers.org/downloads

https://github.com/Liferay-Patchers-Community/liferay-portal/tree/6.1.1-ga2-patched

Thanks!!