[BVAL-100] Java2 Security AccessControlException after moving to use common-lang3

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.4
• Fix Version/s: 0.4
• Component/s: jsr303
• Labels: security
• Assignee: Unassigned
• Reporter: Albert Lee
• Created: 01/Feb/12 19:06
• Updated: 13/Apr/12 17:43
• Resolved: 12/Mar/12 20:57

Description

Encountered the following exception when Java 2 security is enabled in an application server. This is caused after switching the use common-lang from 2.4 to 3.1 pacakge.

java.security.AccessControlException: Access denied (java.lang.RuntimePermission getClassLoader)
at java.security.AccessController.checkPermission(AccessController.java:108)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:544)
at com.ibm.ws.security.core.SecurityManager.checkPermission(SecurityManager.java:208)
at java.lang.Thread.getContextClassLoader(Thread.java:470)
at org.apache.commons.lang3.StringUtils.<clinit>(StringUtils.java:717)
at java.lang.J9VMInternals.initializeImpl(Native Method)
at java.lang.J9VMInternals.initialize(J9VMInternals.java:228)
at org.apache.commons.lang3.ClassUtils.toCanonicalName(ClassUtils.java:923)
at org.apache.commons.lang3.ClassUtils.getClass(ClassUtils.java:792)
at org.apache.bval.jsr303.resolver.DefaultTraversableResolver.initJpa(DefaultTraversableResolver.java:78)
at org.apache.bval.jsr303.resolver.DefaultTraversableResolver.<init>(DefaultTraversableResolver.java:50)
at org.apache.bval.jsr303.ConfigurationImpl.<init>(ConfigurationImpl.java:76)
at org.apache.bval.jsr303.ApacheValidationProvider.createGenericConfiguration(ApacheValidationProvider.java:66)
at javax.validation.Validation$GenericBootstrapImpl.configure(Validation.java:173)
at javax.validation.Validation.buildDefaultValidatorFactory(Validation.java:50)
at com.ibm.websphere.beanvalidation.fat.app.utilities.BeanHelper.resolveValidatorfactory(BeanHelper.java:80)