Ingo Weiss created CXF-7467:
-------------------------------

             Summary: WSDLManagerImpl requires privileged actions in order to 
work under a security manager
                 Key: CXF-7467
                 URL: https://issues.apache.org/jira/browse/CXF-7467
             Project: CXF
          Issue Type: Bug
          Components: JAX-WS Runtime
    Affects Versions: 3.1.12
            Reporter: Ingo Weiss


When using CXF and WSDL under a security manager, security related exceptions 
are thrown, making initialisation of {{WSDLManagerImpl}} fail.

{noformat}
Caused by: java.security.AccessControlException: WFSM000001: Permission check 
failed (permission "("java.io.FilePermission" 
"/Library/Java/JavaVirtualMachines/jdk1.8.0_144.jdk/Contents/Home/jre/lib/wsdl.properties"
 "read")" in code source "(vfs:/content/executorService.war/WEB-INF/classes <no 
signer certificates>)" of "ModuleClassLoader for Module 
"deployment.executorService.war" from Service Module Loader")
        at 
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:278)
        at 
org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:888)
        at 
org.wildfly.security.manager.WildFlySecurityManager.checkRead(WildFlySecurityManager.java:350)
        at java.io.FileInputStream.<init>(FileInputStream.java:127)
        at 
javax.wsdl.factory.WSDLFactory.findFactoryImplName(WSDLFactory.java:243)
        at javax.wsdl.factory.WSDLFactory.newInstance(WSDLFactory.java:60)
        at org.apache.cxf.wsdl11.WSDLManagerImpl.<init>(WSDLManagerImpl.java:84)
        at org.apache.cxf.wsdl11.WSDLManagerImpl.<init>(WSDLManagerImpl.java:80)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at 
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
        at 
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
        at org.apache.cxf.bus.extension.Extension.load(Extension.java:249)
        at org.apache.cxf.bus.extension.Extension.load(Extension.java:261)
        at 
org.apache.cxf.bus.extension.ExtensionManagerImpl.loadAndRegister(ExtensionManagerImpl.java:213)
        at 
org.apache.cxf.bus.extension.ExtensionManagerImpl.getBeanOfType(ExtensionManagerImpl.java:320)
        at 
org.apache.cxf.bus.extension.ExtensionManagerBus.getExtension(ExtensionManagerBus.java:215)
        at 
org.apache.cxf.jaxws.ServiceImpl.initializePorts(ServiceImpl.java:169)
        at org.apache.cxf.jaxws.ServiceImpl.initialize(ServiceImpl.java:160)
        at org.apache.cxf.jaxws.ServiceImpl.<init>(ServiceImpl.java:129)
...
{noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to