Developer Portal

Have a PACL issue in 6.2 - working on completing a hook

I have
portal.security.manager.strategy=liferay
in portal-ext.properties set (and verified via Admin UI)

and in my hook in liferay-plugin-package.properties have
security-manager-enabled=generate

but get no errors and no file created... if I set it to
security-manager-enabled=true

I still get no errors, this is 6.2 GA2
is there some issue with PACL not processing in hooks?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27 de Maio de 2014 11:29

Resposta

Raymond Augé

Ranking: Youngling

Mensagens: 0

Data de entrada: 7 de Fevereiro de 2005

did you enable a security manager in the app server?

RE: Have a PACL issue in 6.2 -No PACL generation or errors

27 de Maio de 2014 11:32

Resposta

Barrie Selack

Ranking: Youngling

Mensagens: 0

Data de entrada: 25 de Fevereiro de 2014

Ah... never mind... for to enable security in Tomcat :-(

R: Have a PACL issue in 6.2 -No PACL generation or errors

7 de Junho de 2014 07:51

Resposta

Bradley Wood

Ranking: Youngling

Mensagens: 2

Data de entrada: 16 de Novembro de 2013

Barrie where did you do that?

Sent from my iPhone with Liferay.com Forums

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

8 de Junho de 2014 08:07

Resposta

Raymond Augé

Ranking: Youngling

Mensagens: 0

Data de entrada: 7 de Fevereiro de 2005

You do that from tomcat's JVM property settings.

Typically that's in bin/setenv.sh with something like:

-Djava.security.manager -Djava.security.policy==$CATALINA_BASE/conf/catalina.policy

(note the double == is deliberate)

inside the catalina.policy file put:

1          grant {
2             permission java.security.AllPermission;
3          };

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10 de Junho de 2014 12:54

Resposta

Bradley Wood

Ranking: Youngling

Mensagens: 2

Data de entrada: 16 de Novembro de 2013

is this information documented?

RE: R: Have a PACL issue in 6.2 -No PACL generation or errors

10 de Junho de 2014 13:05

Resposta

Raymond Augé

Ranking: Youngling

Mensagens: 0

Data de entrada: 7 de Fevereiro de 2005

Properly generating a PACL policy is documented here:

https://www.liferay.com/documentation/liferay-portal/6.2/development/-/ai/developing-plugins-with-security-in-mind-liferay-portal-6-2-dev-guide-11-en

Setting up the app server for java security should be documented in the app server documentation.

But in general they are all very close to being identical to above (cept you may point to a policy file which is in a different location).