I wish I had kept an eye on this thread!

Apologies to Mike - when working around the 'Disable Access to
ColdFusion Java Objects' setting in CF8, I ran into the issue that you
can't use cfdump on many things.

On some things you can, and on other things you can't.

The reason is this - by turning this setting on there is a security
policy that goes into effect that restricts external access to
anything that is coldfusion.* - which includes trying to access and /
or interogate any class or classpath that uses that space.

If you do a lot of CF/Java integration, you will quickly notice that
you can't get to the CF classPath, if you want it, and trying to call
..getClass() (often through reflection) on CF objects causes the error
that you just saw.

I would expect that CFDUMP does call getClass / does some sort of java
meta data introspection on the objects it is attempting to dump -
which in turn throws this error, as it won't be allowed.

This setting - while essential for Shared Hosts, is a pretty damn big
sword that cuts through many things, including aspects of cfdump,
access to CFCProxy and some other bits and pieces that I can't think
of right now.

I think in the coming months, we're going to hit various pieces of
functionality that will be broken on shared servers because of this
setting.

Mark

On 10/24/07, Sean Corfield <[EMAIL PROTECTED]> wrote:
> On 10/23/07, Andrew Scott <[EMAIL PROTECTED]> wrote:
> > However that does mystify me though, cfdump I would not have taken as
> > an internal java tag?
>
> I think this is simply an oversight by the CF team - cfdump does not
> work properly when you turn Java object access off with this new
> setting.
>
> > But what doed also worry me is that the file cfdump.cfm is missing as
> > Mike also stated earlier by the hosting provider.
>
> I think that was a miscommunication...
> --
> Sean A Corfield -- (904) 302-SEAN
> An Architect's View -- http://corfield.org/
>
> "If you're not annoying somebody, you're not really alive."
> -- Margaret Atwood
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
ColdFusion is delivering applications solutions at at top companies 
around the world in government.  Find out how and where now
http://www.adobe.com/cfusion/showcase/index.cfm?event=finder&productID=1522&loc=en_us

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:291935
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

Reply via email to