Hi,

We are planning to publish our component on Liferay Marketplace. We enabled security manager and added respective properties. We are stuck with following security related errors. We are not sure what security properties, we will need to add in liferay-plugin-package.properties. Here is the error we are getting on console.

Caused by: java.lang.SecurityException: Attempted to get class loader
at com.liferay.portal.security.pacl.checker.BaseChecker.throwSecurityException(BaseChecker.java:259)
at com.liferay.portal.security.pacl.checker.RuntimeChecker.checkPermission(RuntimeChecker.java:89)
at com.liferay.portal.security.pacl.ActivePACLPolicy.checkPermission(ActivePACLPolicy.java:55)
at com.liferay.portal.security.lang.PortalSecurityManager.checkPermission(PortalSecurityManager.java:103)
at com.liferay.portal.security.lang.PortalSecurityManager.checkPermission(PortalSecurityManager.java:74)
at java.lang.Thread.getContextClassLoader(Thread.java:1364)
at org.zkoss.zk.ui.impl.AbstractWebApp.loadBuild(AbstractWebApp.java:367)
at org.zkoss.zk.ui.http.WebManager.<init>(WebManager.java:115)
at org.zkoss.zk.ui.http.DHtmlLayoutServlet.init(DHtmlLayoutServlet.java:101)
at javax.servlet.GenericServlet.init(GenericServlet.java:160)
at com.liferay.portal.kernel.servlet.SecureServlet.doPortalInit(SecureServlet.java:95)
at com.liferay.portal.kernel.util.BasePortalLifecycle.portalInit(BasePortalLifecycle.java:42)

We are also getting one warning as shown bellow.

08:27:23,623 WARN [pool-2-thread-3][RuntimeChecker:256] Attempted to access declared members

Can anyone throw some idea on how we can solve these issues?

Regards,

Samir Bhatt

Hi Samir,

Check below link regarding Class Loader Security in Liferay PACL, it might help you.
http://www.liferay.com/documentation/liferay-portal/6.1/development/-/ai/lp-6-1-dgen11-class-loader-security-0

Thanks,
Tejas

As per the details in thread below by Ray, similar error is going to be fix in later release.
http://www.liferay.com/community/forums/-/message_boards/message/21718891

Tejas is correct. This error has been solved.

A release containing fixes for all the known PACL issues, as well as a semi-automated tool for generating the PACL policy, should be out soon.

Thanks Ray & Tejas for clarifying the same. Ray do you know tentative timeline of the release?

Regards,

Samir Bhatt

Please see: http://www.liferay.com/community/forums/-/message_boards/message/23376895

RE: PACL Errors when security manger is enabled "Attempted to get class loa