[
https://issues.apache.org/jira/browse/WICKET-3050?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12912724#action_12912724
]
Peter Ertl commented on WICKET-3050:
------------------------------------
The method that caused the problem is
java.io.ObjectOutputStream#enableReplaceObject(true)
which is not allowed in GAE's security manager.
Catching the exception and logging it will very obviously not solve the problem.
In all places this methods is used we probably need some substitute for it.
> AccessControlException thrown when security manager denies access
> -----------------------------------------------------------------
>
> Key: WICKET-3050
> URL: https://issues.apache.org/jira/browse/WICKET-3050
> Project: Wicket
> Issue Type: Bug
> Environment: Google App Engine
> Reporter: Clint Checketts
> Priority: Trivial
> Fix For: 1.4.13, 1.5-M3
>
> Attachments: enableReplaceObject_patch.txt
>
>
> Google App Engine locks down various environmental pieces. The ModelChange
> class tries to do some serialization which causes the exception.
> Caused by: java.security.AccessControlException: access denied
> (java.io.SerializablePermission enableSubstitution)
> at
> java.security.AccessControlContext.checkPermission(AccessControlContext.java:355)
> at
> java.security.AccessController.checkPermission(AccessController.java:567)
> at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
> at
> java.io.ObjectOutputStream.enableReplaceObject(ObjectOutputStream.java:609)
> at
> org.apache.wicket.util.lang.Objects$ReplaceObjectOutputStream.<init>(Objects.java:183)
> at
> org.apache.wicket.util.lang.Objects$ReplaceObjectOutputStream.<init>(Objects.java:174)
> at org.apache.wicket.util.lang.Objects.cloneModel(Objects.java:461)
> at
> org.apache.wicket.version.undo.ModelChange.<init>(ModelChange.java:103)
> at
> org.apache.wicket.version.undo.ChangeList.componentModelChanging(ChangeList.java:64)
> at
> org.apache.wicket.version.undo.UndoPageVersionManager.componentModelChanging(UndoPageVersionManager.java:123)
> at org.apache.wicket.Page.componentModelChanging(Page.java:1598)
> at org.apache.wicket.Component.modelChanging(Component.java:2206)
> at
> org.apache.wicket.Component.setDefaultModelObject(Component.java:3046)
> at
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel.setSelectedTab(TabbedPanel.java:338)
> at
> org.apache.wicket.extensions.markup.html.tabs.TabbedPanel$5.onClick(TabbedPanel.java:319)
> at org.apache.wicket.markup.html.link.Link.onLinkClicked(Link.java:224)
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
