Issue with Security Manager

[Dzmitry Shaparau，修改在11 年前。]

Hi All,

I enabled Security Manager in my plugin and now I see very strange logs such as:
14:43:16,017 WARN [http-bio-8080-exec-71][RuntimeChecker:256] Attempted to access declared members
14:43:16,054 WARN [http-bio-8080-exec-71][ReferenceRegistry:42] Not allowed to get field _service for class ...the name of my service class Util....

The second problem is that in some cases my inter-portlet communication fails with error:
14:49:45,942 WARN [http-bio-8080-exec-74][RuntimeChecker:256] Attempted to access declared members
Oct 30, 2012 2:49:45 PM org.apache.catalina.core.ApplicationDispatcher invoke
SEVERE: Servlet.service() for servlet twostepauthconfig Servlet threw exception
java.lang.SecurityException: Attempted to access declared members
at com.liferay.portal.security.pacl.checker.BaseChecker.throwSecurityException(BaseChecker.java:259)
at com.liferay.portal.security.pacl.checker.RuntimeChecker.checkPermission(RuntimeChecker.java:71)

Could you please advise me which property should I add to liferay-plagin-package.properties?

[Dzmitry Shaparau，修改在11 年前。]

I cauth the source of the problem.

It is in usage of org.codehaus.jackson.map.ObjectMapper, i.e.

ObjectMapper objectMapper = new ObjectMapper();

In this case BaseReflectChecker is called for sun.reflect.annotation.AnnotationType. And it does not support it and returns "false".

Looks like a bug.

Do we have LR people on the forum?

[Florencia Gadea，修改在11 年前。]

Hi Dzmitry,

Did you find the solution?

We have the same problem.

Regards,

Flor.

[Dzmitry Shaparau，修改在11 年前。]

Hi Florencia,

The issue is solved in 6.2.0 CE
you can track it on https://jira.portletfaces.org/browse/LPS-30769

[Florencia Gadea，修改在11 年前。]

Ok, thanks.

[James Falkner，修改在11 年前。]

Will also be in 6.1 CE GA3!

[Florencia Gadea，修改在11 年前。]

That's great news James!!

Do you know where I can download the patch for this? (for the CE)

Regards,

Flor.

[James Falkner，修改在11 年前。]

Florencia Gadea:

That's great news James!!

Do you know where I can download the patch for this? (for the CE)

Regards,

Flor.

Here's the patch. But this is against master (6.2.x). If you want this for 6.1 CE you may need to backport it (or wait for GA3).

[Florencia Gadea，修改在11 年前。]

Thanks!! I will take a look at it.

What we are doing at Rotterdam CS is applying all possible patches (related to PACL), because that is the only way we know for sure that our plugins will be PACL-error-free in GA3.

Regards,

Flor.

[Juan Gonzalez P，修改在11 年前。]

Hi James,

Whenever there is a road map (in JIRA) for 6.1.1 GA3, please tell in forums.

Would be great to include issues from here (at least the most important ones):

https://www.lcepatchers.org/downloads

https://github.com/Liferay-Patchers-Community/liferay-portal/tree/6.1.1-ga2-patched

Thanks!!