Hi Reto, actually I was looking into that earlier today, but I was not able to find something specific. The only thing I was able to come up was to get the directory of the temp directory from the System properties and than set a normal FilePermission. Because of that I adapted the TikaEngine to call the parser within an "AccessController.doPrivileged(..)" block (see [1]). This solves STANBOL-865 but I think it would be still a good idea to enable temporary file creation for the default user.
BTW: * I would be interested to know where to set such permissions. I was looking at the Launchpad, where the SecurityManager is set, but after looking at the code I came to the conclusion that this is the wrong place to look. * On Monday I had a look at the logs of the dev.iks-project.eu:8081 server and I found a lot of SecurityExceptions. It looked like as if all EnhancementEngines that connect to remote services (such as dbpedia spotlight, celi, geonames, zemanta, open calais) do not work. Integration-Tests are not affected by this as they run in offline mode and therefore do not include tests for Engines that connect to remote services. If I find some time I will try to test all those engines and create the according JIRA issues. best Rupert [1] http://svn.apache.org/viewvc?rev=1430813&view=rev On Wed, Jan 9, 2013 at 10:41 PM, Reto Bachmann-Gmür <[email protected]> wrote: > Hi Rupert > > Do you know what permission would have to be added? A specific permission > allowing to write temporary files and to read only those wouldn't be a > security risk (DOS can be implemented more efficiently by other means). > > Cheers, > Reto > On Jan 4, 2013 12:00 PM, "Rupert Westenthaler" < > [email protected]> wrote: > >> Hi Reto, all >> >> WDYT about adding the permission to the anonymous user to create >> temporary files. This would solve STANBOL-865 [1] and resolve the >> security related issue the TikaEngine is encounting from time to time >> (e.g. in the Jenkins build #1200). >> >> best >> Rupert >> >> >> [1] https://issues.apache.org/jira/browse/STANBOL-865 >> >> -- >> | Rupert Westenthaler [email protected] >> | Bodenlehenstraße 11 ++43-699-11108907 >> | A-5500 Bischofshofen >> -- | Rupert Westenthaler [email protected] | Bodenlehenstraße 11 ++43-699-11108907 | A-5500 Bischofshofen
