DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15736>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=15736

Struts doesn't initialize under strict security manager

           Summary: Struts doesn't initialize under strict security manager
           Product: Struts
           Version: Nightly Build
          Platform: PC
        OS/Version: Windows NT/2K
            Status: NEW
          Severity: Blocker
          Priority: Other
         Component: Controller
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


(NOTE: Version is 1.1 Beta 3, not yet available here)

As of ActionServlet revision 1.138, Struts fails to initialize when deployed on
J2EE-RI 1.3.1, which employs quite strict security restrictions. More
preceisely, the problem surfaces when trying to use the Validator plugin, I
haven't tested other plugins.

See:
http://cvs.apache.org/viewcvs.cgi/jakarta-struts/src/share/org/apache/struts/action/ActionServlet.java.diff?r1=1.137&r2=1.138&diff_format=h

The exact problem seems to be that BeanUtils is trying to call setAccessible()
on the method that is not found on the ValidatorPlugin, which triggers an
AccessControlException to be thrown.

The attempted solution with revision 1.139 doesn't fix the problem, because
BeanUtils.setProperty() doesn't throw a NoSuchMethodException but rather a
security related exception.

This problem should be easily reproducable by trying to deploy and run the
Validator example web-app under the J2EE-RI server 1.3.1, without the default
configuration.

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to