Paul Nicolucci created MYFACES-3590:
---------------------------------------

             Summary: AccessControlException occurs in Classpath._searchDir
                 Key: MYFACES-3590
                 URL: https://issues.apache.org/jira/browse/MYFACES-3590
             Project: MyFaces Core
          Issue Type: Bug
          Components: JSR-314
    Affects Versions: 2.0.14
         Environment: WebSphere Application Server
            Reporter: Paul Nicolucci
            Priority: Minor
         Attachments: Classpath.patch

I have an application which is experiencing an AccessControlException with the 
following stack trace: 

Caused by: java.security.AccessControlException: Access denied 
(java.io.FilePermission \META-INF read)
        at 
java.security.AccessController.checkPermission(AccessController.java:108)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
        at 
com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:208)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:883)
        at java.io.File.exists(File.java:742)
        at 
org.apache.myfaces.view.facelets.util.Classpath._searchDir(Classpath.java:116)
        at 
org.apache.myfaces.view.facelets.util.Classpath._searchResource(Classpath.java:106)
        at 
org.apache.myfaces.view.facelets.util.Classpath.search(Classpath.java:61)

I've attached a patch which just adds a doPrivileged block around the offending 
code.

If someone can review and commit the change that would be great, let me know if 
there are any questions.

Thanks!

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to