DO NOT REPLY [Bug 28256] - WebappClassLoader.findClassInternal() permission problems

2004-09-01 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=28256.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28256

WebappClassLoader.findClassInternal() permission problems

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||WONTFIX



--- Additional Comments From [EMAIL PROTECTED]  2004-09-02 00:38 ---
Closing per Yoav's comments.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 28256] - WebappClassLoader.findClassInternal() permission problems

2004-08-11 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=28256.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28256

WebappClassLoader.findClassInternal() permission problems





--- Additional Comments From [EMAIL PROTECTED]  2004-08-11 16:40 ---
With the current refactoring of classloaders for Tomcat 5.next (or 5.1, or 5.5, 
or whatever), I'm probably going to close this item as it will no longer be 
relevant.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 28256] - WebappClassLoader.findClassInternal() permission problems

2004-04-07 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=28256.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28256

WebappClassLoader.findClassInternal() permission problems

[EMAIL PROTECTED] changed:

   What|Removed |Added

   Severity|Blocker |Minor



--- Additional Comments From [EMAIL PROTECTED]  2004-04-07 14:55 ---
Can you attach your test case? 

I'm -0 for such change for 1 reason: performance. Adding your recommendation
will impact the current Tomcat performance when security is turned on. What you
are doing is not a common use case, and will impact a lot of container who
embedded Tomcat with security turned on (J2EE 1.4 requires the security manager
turned on by default). 

Also, you can declare a more restrictive set of permissions in catalina.policy
than AllPermissions.

Thanks

-- Jeanfrancois

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 28256] - WebappClassLoader.findClassInternal() permission problems

2004-04-07 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=28256.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28256

WebappClassLoader.findClassInternal() permission problems





--- Additional Comments From [EMAIL PROTECTED]  2004-04-07 15:02 ---
For the performance concern, I recommend adding the usual check on the presence
of the security manager. Also, the CL actually *used* to be fast (it's no longer
fast due to all the extra stuff done to avoid locking JARs at all costs - stupid
JVM).

BTW, going through the bug report gave me a headache :(

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]