Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Eclipse Projects » Remote Application Platform (RAP) » Deploy on hosted server leads to AccessControlException
Deploy on hosted server leads to AccessControlException [message #654112] Mon, 14 February 2011 09:10 Go to next message
Eclipse UserFriend
Hi,

I am able to deploy my RAP .war to my local tomcat but when uploading to
a hosted server at my web hotel I get the stacktrace below. I suspect
this is due to insufficient privileges on this server
(clearPrefixedSystemProperties) but I am wondering if/how I can work
around this problem or if I cannot use this web hotel for hosting my
deployed RAP application. All suggestions are welcome!

Thanks,

/Ola


java.security.AccessControlException: access denied
(java.util.PropertyPermission * read,write)
java.security.AccessControlContext.checkPermission(Unknown Source)
java.security.AccessController.checkPermission(Unknown Source)
java.lang.SecurityManager.checkPermission(Unknown Source)
java.lang.SecurityManager.checkPropertiesAccess(Unknown Source)
java.lang.System.getProperties(Unknown Source)
org.eclipse.equinox.servletbridge.FrameworkLauncher.clearPre fixedSystemProperties(FrameworkLauncher.java:638)
org.eclipse.equinox.servletbridge.FrameworkLauncher.setIniti alProperty(FrameworkLauncher.java:587)
org.eclipse.equinox.servletbridge.FrameworkLauncher.buildIni tialPropertyMap(FrameworkLauncher.java:534)
org.eclipse.equinox.servletbridge.FrameworkLauncher.start(Fr ameworkLauncher.java:353)
org.eclipse.equinox.servletbridge.BridgeServlet.init(BridgeS ervlet.java:65)
javax.servlet.GenericServlet.init(GenericServlet.java:212)
sun.reflect.GeneratedMethodAccessor45.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
java.lang.reflect.Method.invoke(Unknown Source)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil .java:270)
org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil .java:269)
java.security.AccessController.doPrivileged(Native Method)
javax.security.auth.Subject.doAsPrivileged(Unknown Source)
org.apache.catalina.security.SecurityUtil.execute(SecurityUt il.java:302)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(Secu rityUtil.java:163)
org.apache.catalina.security.SecurityUtil.doAsPrivilege(Secu rityUtil.java:117)
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorRepo rtValve.java:102)
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAd apter.java:298)
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler. java:190)
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.ja va:291)
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java :776)
org.apache.jk.common.ChannelSocket.processConnection(Channel Socket.java:705)
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(Ch annelSocket.java:898)
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.ru n(ThreadPool.java:690)
java.lang.Thread.run(Unknown Source)
Re: Deploy on hosted server leads to AccessControlException [message #654142 is a reply to message #654112] Mon, 14 February 2011 10:35 Go to previous messageGo to next message
Ralf Sternberg is currently offline Ralf SternbergFriend
Messages: 1313
Registered: July 2009
Senior Member

Hi Ola,

obviously, you are not allowed to read all system properties because your
security policy is too restrictive. The servlet bridge calls
System.getProperties() at some point and you're out.

I personally doubt that such a restrictive policy can be an acceptable
basis for hosting applications.


Regards, Ralf

--
Ralf Sternberg

Twitter: @ralfstx
Blog: http://eclipsesource.com/blogs/

Professional services for RAP and RCP?
http://eclipsesource.com/services/rap/
Re: Deploy on hosted server leads to AccessControlException [message #654143 is a reply to message #654142] Mon, 14 February 2011 11:12 Go to previous messageGo to next message
Eclipse UserFriend
Thanks for the answer Ralf. I will contact the hosting service and get
their comments on this.

Do you (or anyone else) have suggestions for companies with hosting
services that are confirmed to work with deployed RAP applications?

Cheers,

/Ola


On 2011-02-14 11.35, Ralf Sternberg wrote:
> Hi Ola,
>
> obviously, you are not allowed to read all system properties because your
> security policy is too restrictive. The servlet bridge calls
> System.getProperties() at some point and you're out.
>
> I personally doubt that such a restrictive policy can be an acceptable
> basis for hosting applications.
>
>
> Regards, Ralf
>
Re: Deploy on hosted server leads to AccessControlException [message #654150 is a reply to message #654143] Mon, 14 February 2011 11:52 Go to previous message
Eclipse UserFriend
Hi,

I got this reply from my web hotel:

==
You are not allowed to write properties as that would change settings
for other users in the shared instance.

If you run the following it requires read and write:
Properties sysProps = System.getProperties();

If you change to the following it only requires read:
Properties myProps = new Properties();
Properties sysProps = System.getProperties();
==

This looks weird to me. Can anyone with more experience comment on this?
Also, it leaves me uncertain how to solve my problem of deploying so I'd
value any input on this matter!

Cheers,

/Ola


On 2011-02-14 12.12, Ola Spjuth wrote:
> Thanks for the answer Ralf. I will contact the hosting service and get
> their comments on this.
>
> Do you (or anyone else) have suggestions for companies with hosting
> services that are confirmed to work with deployed RAP applications?
>
> Cheers,
>
> /Ola
>
>
> On 2011-02-14 11.35, Ralf Sternberg wrote:
>> Hi Ola,
>>
>> obviously, you are not allowed to read all system properties because your
>> security policy is too restrictive. The servlet bridge calls
>> System.getProperties() at some point and you're out.
>>
>> I personally doubt that such a restrictive policy can be an acceptable
>> basis for hosting applications.
>>
>>
>> Regards, Ralf
>>
>
Previous Topic:OSGi Declarative Services At Startup
Next Topic:A new update of qooxdoo, or use another framework?
Goto Forum:
  


Current Time: Fri Apr 26 18:07:06 GMT 2024

Powered by FUDForum. Page generated in 0.03610 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top