On 04/25/2011 10:07 AM, Edvin Syse wrote:
> My application is a CMS where each user can compile and run Groovy
> classes as "controllers" for pages. These Groovy classes are compiled,
> and it is fully legal to put part of a such a class in a session
> variable (they are Serializable). The controller is executed using a
> special classloader and securitymanager, so that each user can only
> access his own compiled controllers. These classes are not known by the
> web-app's default classloader. When Resin tries to serialize the session
> data, it will throw a ClassNotFoundException, for obvious reasons. I'm
> thinking if I can override the classloader used to
> serialize/deserialize, I would be home free. Maybe I'm off on the wrong
> track here? :)

Hmm.

When you call request.getSession(), have you already set the 
Thread.setContextClassLoader?

It might be cleaner for us to add a "use-context-class-loader" as a 
<session-config> configuration.

-- Scott

> -- Edvin
>
> Den 25.04.2011 18:57, skrev Scott Ferguson:
>> On 04/24/2011 05:14 PM, Edvin Syse wrote:
>>> Hi,
>>>
>>> I see that the JavaSessionDeserializer has a constructor that takes a 
>>> ClassLoader:
>>>
>>> http://caucho.com/resin-4.0-javadoc/com/caucho/server/session/JavaSessionDeserializer.html
>>>
>>> .. but I can't figure out how to configure this in resin.xml. It seems I 
>>> can override SessionManager#createSessionDeserializer(InputStream), but I 
>>> don't know how to configure the sessionmanager either. Any help would be 
>>> greatly appreciated :)
>> I'm not sure why you would want to.
>>
>> The purpose of the classloader argument is so the deserializer will
>> deserialize in the web-app's context. (An issue that just got fixed in
>> 4.0.16.) That shouldn't be something that an application would need to
>> change.
>>
>> -- Scott
>>
>>> Sincerely,
>>> Edvin Syse
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> resin-interest mailing list
>>> resin-interest@caucho.com
>>> http://maillist.caucho.com/mailman/listinfo/resin-interest
>>>
>>
>> _______________________________________________
>> resin-interest mailing list
>> resin-interest@caucho.com
>> http://maillist.caucho.com/mailman/listinfo/resin-interest
>
> _______________________________________________
> resin-interest mailing list
> resin-interest@caucho.com
> http://maillist.caucho.com/mailman/listinfo/resin-interest
>



_______________________________________________
resin-interest mailing list
resin-interest@caucho.com
http://maillist.caucho.com/mailman/listinfo/resin-interest

Reply via email to