组合视图 统一视图 树状图
toggle
Philippe Tran
Spring-based app with security-manager-enabled on LR 6.2.0 M5
2013年5月14日 上午2:40
答复

Philippe Tran

等级: Youngling

帖子: 0

加入日期: 2009年1月22日

最近的帖子

Hi everyone,

I am struggling to make my Spring-based app installed with Liferay 6.2.0 M5 with security-manager-enabled, because of the bean dependency-injection nature of Spring (+ cglib). Moreover, I use logback for logging purposes.

I admit I don't understand very well the security-manager-get-bean-property, security-manager-get-bean-property and class-loader documentation...

Right now, I have 3 kinds of problems:
1. when loading the Spring root context, I am stuck with the Attempted to get protection domain error, because net.sf.cglib.core.ReflectUtils calls Class<T>.getProtectionDomain()
2. when loading the annotated portlet, I got the Attempted to access declared members error because org.springframework.core.annotation.AnnotationUtils use of Class<T>.getDeclaredMethods()
3. lastly, logback use of Class<T>.getProtectionDomain() and Class<T>.getClassLoader() results in Attempted to get protection domain and Attempted to get a class loader errors

My liferay-plugin-package.properties are set as:

security-manager-environment-variables=\
\\*

security-manager-class-loader-reference-ids=\
myportlet,\
myportlet_WAR_myapp

security-manager-get-bean-property=\
net.sf.cglib.core.ReflectUtils,\
org.springframework.core.annotation.AnnotationUtils


But I can't get through... I thought security-manager-get-bean-property would let org.springframework.core.annotation.AnnotationUtils use of Class<T>.getDeclaredMethods(), and security-manager-class-loader-reference-ids would let logback use Class<T>.getClassLoader().

Do you guys have any idea about this ?

Thanks in advance,
Philippe
David H Nebinger
RE: Spring-based app with security-manager-enabled on LR 6.2.0 M5
2013年5月14日 上午5:32
答复

David H Nebinger

等级: Youngling

帖子: 44

加入日期: 2006年9月1日

最近的帖子

Use the generator option, this will help identify the right rules you need to have.

If I remember correctly, there's a bug open on PACL and annotations, so there may still be a problem there that will block you...
Philippe Tran
RE: Spring-based app with security-manager-enabled on LR 6.2.0 M5
2013年5月14日 上午6:55
答复

Philippe Tran

等级: Youngling

帖子: 0

加入日期: 2009年1月22日

最近的帖子

Hi David,

I have tried the "generate" option, but nothing comes out :-(
Philippe

Forums

To access the Developer Forum, please login to your Liferay.com account if you are already a registered developer or register to become a developer.