Security in AUT [message #760895] |
Mon, 05 December 2011 14:25 |
|
Hi there,
I need to test an application, that uses Java security with a policy file. In the installation manual it says that the following permissions need to be granted.
grant {
permission java.io.FilePermission "<<ALL FILES>>", "read, write, delete, execute";
permission java.lang.RuntimePermission "getClassLoader";
permission java.lang.RuntimePermission "createClassLoader";
permission java.lang.RuntimePermission "setContextClassLoader";
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.RuntimePermission "modifyThreadGroup";
permission java.lang.RuntimePermission "exitVM";
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
permission java.util.logging.LoggingPermission "control";
permission java.util.PropertyPermission "*", "read, write";
permission java.awt.AWTPermission "listenToAllAWTEvents";
permission java.awt.AWTPermission "showWindowWithoutWarningBanner";
permission java.awt.AWTPermission "createRobot";
permission java.net.SocketPermission "*", "accept, connect, listen, resolve";
permission java.awt.AWTPermission "accessClipboard";
permission java.awt.AWTPermission "accessEventQueue";
//needed to add those manually; not mentioned in the manual.
permission java.lang.RuntimePermission "setContextClassLoader";
permission java.lang.RuntimePermission "accessClassInPackage.sun.awt.windows";
permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
};
I granted those, I can launch the application (without those I could start it), but the Object Mapping Mode doesn't work. When it (the Object Mapping Mode) is activated, no green rectangle appears around Swing elements. The mapping shortcut doesn't work, too. Actually the UI gets a little 'sloppy', i.e. entering text takes longer. When Object Mapping Mode is disabled everything works fine again.
Any ideas why this could be? Are the missing permissions? Any help is much appreciated.
Amir
|
|
|
Re: Security in AUT [message #760917 is a reply to message #760895] |
Mon, 05 December 2011 15:25 |
|
I am really sorry if my threads are annoying, but some stuff just isn't written in the documentation.
You also need a rule for:
access: access denied (java.lang.RuntimePermission accessClassInPackage.sun.reflect)
Now the Object Mapping works fine again.
|
|
|
Re: Security in AUT [message #760937 is a reply to message #760917] |
Mon, 05 December 2011 16:25 |
|
Hi Amir,
your threads aren't annoying at all. You just must keep in mind that we check the forum about once a day and that could mean your posting will not be seen until the other day.
We will update the documentation accordingly. For the time being we are not able to set up an automated test to check all the security requirements (which would have prevented this problem).
Thanks for the help
Achim
|
|
|
Powered by
FUDForum. Page generated in 0.01921 seconds