Unfortunately, this is completely required per the jaxws spec. We HAVE
to call the check permissions on the SecurityManager when an
Endpoint.publish(..) call is made.
You really have two options:
1) Configure the SecurityManager to allow the PUBLISH_PERMISSION check to
succeed. I think tomcat has some configs to allow you to keep the SM
in place, but configured to allow publish.
2) Switch from using jaxws:endpoint to jaxws:server in your spring config
file. jaxws:server doesn't use the JAXWS Endpoint apis (It create the
CXF internal representation that the JAXWS Endpoing thing more or less
wrappers) so it may not be affected by that check.
Dan
On Friday 01 February 2008, Yadav, Yogendra (IT) wrote:
> Hi,
> Having this issue while deploying CXF in Tomcat which has
> SecurityManager enabled and can't turn off.
>
> <org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'helloWorld': Invocation of init method
> failed; nested exception is java.security.AccessControlException:
> access denied (javax.xml.ws.WebServicePermission publishEndpoint)
> Caused by: java.security.AccessControlException: access denied
> (javax.xml.ws.WebServicePermission publishEndpoint)
> at
> java.security.AccessControlContext.checkPermission(AccessControlContex
>t. java:264)
> at
> java.security.AccessController.checkPermission(AccessController.java:4
>27 )
> at
> java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
> at
> org.apache.cxf.jaxws.EndpointImpl.checkPublishPermission(EndpointImpl.
>ja va:349)
>
> The EndpointImpl.checkPublishPermission :
> protected void checkPublishPermission() {
> SecurityManager sm = System.getSecurityManager();
> if (sm != null) {
> sm.checkPermission(PUBLISH_PERMISSION);
> } else if
> (Boolean.getBoolean(CHECK_PUBLISH_ENDPOINT_PERMISSON_PROPERTY)) {
> AccessController.checkPermission(PUBLISH_PERMISSION);
>
> Where:
> private static final WebServicePermission PUBLISH_PERMISSION =
> new WebServicePermission("publishEndpoint");
>
> thanx
> -yogen
> --------------------------------------------------------
>
> NOTICE: If received in error, please destroy and notify sender. Sender
> does not intend to waive confidentiality or privilege. Use of this
> email is prohibited when received in error.
--
J. Daniel Kulp
Principal Engineer, IONA
[EMAIL PROTECTED]
http://www.dankulp.com/blog
