Uploaded image for project: 'Struts 1'
  1. Struts 1
  2. STR-539

Tomcat 4.0.3 + struts fails with -security

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: Nightly Build
    • Fix Version/s: 1.1 Family
    • Component/s: Unknown
    • Labels:
      None
    • Environment:
      Operating System: All
      Platform: PC
    • Bugzilla Id:
      7579

      Description

      When I start tomcat 4.0.3 (or 4.0.2) with -security I get the security
      exception below. I am using struts nightly build 1/2/02 and the commons-* libs
      (which are all in my WEB-INF\lib directory).

      I submitted this to the tomcat bug list(7540), but remm@apache.org replied that
      "Applications which are used in user space (like Struts here) may need
      additional permissions to run."

      Does struts need certain permissions set? I can't find documentation
      anywhere (needs to be documented if so).

      I've asked about this on struts-user and gotten no response.

      See also STR-537 which also occurs (may be related).

      This is blocking me on my app deployment.

      Thanks,
      – Frank

      ------- console output ---------------

      Starting service Tomcat-Standalone
      Apache Tomcat/4.0.3
      logClassName=null
      Security Violation, attempt to use Restricted Class: org.apache.jasper.resources
      .messages
      java.security.AccessControlException: access denied (java.lang.RuntimePermission
      accessClassInPackage.org.apache.jasper.resources)
      at java.security.AccessControlContext.checkPermission(AccessControlConte
      xt.java:272)
      at java.security.AccessController.checkPermission(AccessController.java:
      399)
      at java.lang.SecurityManager.checkPermission(SecurityManager.java:545)
      at java.lang.SecurityManager.checkPackageAccess(SecurityManager.java:150
      1)
      at org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClas
      sLoader.java:1056)
      at org.apache.catalina.loader.StandardClassLoader.loadClass(StandardClas
      sLoader.java:992)
      at java.util.ResourceBundle.loadBundle(ResourceBundle.java:910)
      at java.util.ResourceBundle.findBundle(ResourceBundle.java:791)
      at java.util.ResourceBundle.getBundleImpl(ResourceBundle.java:621)
      at java.util.ResourceBundle.getBundle(ResourceBundle.java:546)
      at org.apache.jasper.Constants.initResources(Constants.java:216)
      at org.apache.jasper.Constants.getString(Constants.java:235)
      at org.apache.jasper.parser.MyEntityResolver.resolveEntity(ParserUtils.j
      ava:413)
      at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromExtern
      alEntity(DefaultEntityHandler.java:750)
      at org.apache.xerces.readers.DefaultEntityHandler.startReadingFromExtern
      alSubset(DefaultEntityHandler.java:566)
      at org.apache.xerces.framework.XMLDTDScanner.scanDoctypeDecl(XMLDTDScann
      er.java:1139)
      at org.apache.xerces.framework.XMLDocumentScanner.scanDoctypeDecl(XMLDoc
      umentScanner.java:2145)
      at org.apache.xerces.framework.XMLDocumentScanner.access$0(XMLDocumentSc
      anner.java:2100)
      at org.apache.xerces.framework.XMLDocumentScanner$PrologDispatcher.dispa
      tch(XMLDocumentScanner.java:831)
      at org.apache.xerces.framework.XMLDocumentScanner.parseSome(XMLDocumentS
      canner.java:381)
      at org.apache.xerces.framework.XMLParser.parse(XMLParser.java:1081)
      at org.apache.xerces.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.
      java:195)
      at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:122)
      at org.apache.jasper.parser.ParserUtils.parseXMLDocument(ParserUtils.jav
      a:200)
      at org.apache.jasper.compiler.TldLocationsCache.processWebDotXml(TldLoca
      tionsCache.java:165)
      at org.apache.jasper.compiler.TldLocationsCache.<init>(TldLocationsCache
      .java:138)
      at org.apache.jasper.EmbededServletOptions.<init>(EmbededServletOptions.
      java:345)
      at org.apache.jasper.servlet.JspServlet.init(JspServlet.java:266)
      at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.
      java:916)
      at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:80
      8)
      at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContex
      t.java:3266)
      at org.apache.catalina.core.StandardContext.start(StandardContext.java:3
      395)
      at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)

      at org.apache.catalina.core.StandardHost.start(StandardHost.java:614)
      at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1123)

      at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:343
      )
      at org.apache.catalina.core.StandardService.start(StandardService.java:3
      88)
      at org.apache.catalina.core.StandardServer.start(StandardServer.java:506
      )
      at org.apache.catalina.startup.Catalina.start(Catalina.java:781)
      at org.apache.catalina.startup.Catalina.execute(Catalina.java:681)
      at org.apache.catalina.startup.Catalina.process(Catalina.java:179)
      at java.lang.reflect.Method.invoke(Native Method)
      at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:243)

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              flawlor@athensgroup.com Frank Lawlor
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: