Have a PACL issue in 6.2 - working on completing a hook

I have
portal.security.manager.strategy=liferay
in portal-ext.properties set (and verified via Admin UI)

and in my hook in liferay-plugin-package.properties have
security-manager-enabled=generate

but get no errors and no file created... if I set it to
security-manager-enabled=true

I still get no errors, this is 6.2 GA2
is there some issue with PACL not processing in hooks?

did you enable a security manager in the app server?

Ah... never mind... for to enable security in Tomcat :-(

Barrie where did you do that?

Sent from my iPhone with Liferay.com Forums

You do that from tomcat's JVM property settings.

Typically that's in bin/setenv.sh with something like:

-Djava.security.manager -Djava.security.policy==$CATALINA_BASE/conf/catalina.policy

(note the double == is deliberate)

inside the catalina.policy file put:

is this information documented?

Properly generating a PACL policy is documented here:

https://www.liferay.com/documentation/liferay-portal/6.2/development/-/ai/developing-plugins-with-security-in-mind-liferay-portal-6-2-dev-guide-11-en

Setting up the app server for java security should be documented in the app server documentation.

But in general they are all very close to being identical to above (cept you may point to a policy file which is in a different location).