Background:
I am developing a ColdFusion Application using CFMX 7 and the Mach-II
Framework.  There are multiple applications in the JRun/ColdFusion
instance and the applications are protected from each other with
SandBox Security.

Problem:
When I make a request for the index.cfm page of my application (AAA) I
get the following stack of errors.

Error1:
raw_trace: java.security.AccessControlException: access denied
(java.io.FilePermission
D:\CFProjects\AAA\extensions\config\mach-ii.xml read)
template: java.io.FilePermission D

Error2:
raw_trace: at 
cfAppFactory2ecfc946711876$funcCREATEAPPMANAGER.runFunction(D:\CFProjects\BBB\extensions\MachII\framework\AppFactory.cfc:28)
template: D:\CFProjects\BBB\extensions\MachII\framework\AppFactory.cfc

Error3:
raw_trace:at 
cfAppLoader2ecfc1201192930$funcRELOADCONFIG.runFunction(D:\CFProjects\BBB\extensions\MachII\framework\AppLoader.cfc:49)
template: D:\CFProjects\BBB\extensions\MachII\framework\AppLoader.cfc

Error4:
raw_trace: at 
cfAppLoader2ecfc1201192930$funcINIT.runFunction(D:\CFProjects\BBB\extensions\MachII\framework\AppLoader.cfc:22)
template: D:\CFProjects\BBB\extensions\MachII\framework\AppLoader.cfc

Error5: raw_trace:at
cfApplication2ecfc2128044489$funcINIT.runFunction(D:\CFProjects\AAA\www\Application.cfc:29)
template: D:\CFProjects\AAA\www\Application.cfc

Error6:
raw_trace:at 
cfApplication2ecfc2128044489$funcONAPPLICATIONSTART.runFunction(D:\CFProjects\AAA\www\Application.cfc:43)
template: D:\CFProjects\AAA\www\Application.cfc

It appears that the Mach-II framework components are also installed
under application BBB and both ..\AAA\extensions and ..\BBB\extensions
are in the Custom Tag Path.

1. My application (AAA) finds the Mach-II components under application
BBB's extensions folder via the CustomTagPaths.
2. The Mach-ii Framework located under BBB is loaded by AAA and then
the framework tries to read the mach-ii.xml file located in a folder
under AAA.
3. Then the sandbox security catches the security violation and
throwing a security violation error.

Application code located under application BBB is not allow to read
files located in application AAA.
Any ideas how to prevent this from happening?
How can I keep application AAA from calling components located in the
CustomTagPaths?
I don't want to hardcode a fixed path to the components for obvious reasons.

I am not the sysadmin, so I am not able to do much testing.  But I can
provide a recommendation if I could figure out how to fix the problem.

Please advise.

--
Thanks,
Troy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:221889
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to