sample policy file

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

sample policy file

Robert Bateman
Good afternoon,

I've downloaded the Beta 4 of OPS and am using the sample policy
information from the web site, and have noticed a couple of
errors/issues.  I looked in CVS to see if the policy file was there so I
could insure I have the latest incarnation, and didn't see it.

If I've located bugs or errors or corrections, do I post those changes
here or in the bug tracker?


Bob




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: sample policy file

Alessandro  Vernet
Administrator
Hi Robert,

Please post bugs that you might find or your modifications to the code
in this list. This is the best way for us to see your submissions and
so we can react as quickly as possible.

Alex

On 12/8/05, Robert Bateman <[hidden email]> wrote:

> Good afternoon,
>
> I've downloaded the Beta 4 of OPS and am using the sample policy
> information from the web site, and have noticed a couple of
> errors/issues.  I looked in CVS to see if the policy file was there so I
> could insure I have the latest incarnation, and didn't see it.
>
> If I've located bugs or errors or corrections, do I post those changes
> here or in the bug tracker?
>
>
> Bob
>
>
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
>
>
>

--
Blog (XML, Web apps, Open Source): http://www.orbeon.com/blog/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
Reply | Threaded
Open this post in threaded view
|

sample policy file troubles

Robert Bateman
Here are the things I've noticed about the sample policy file posted on
the Orbeon website:

1: The version of xercesImpl included in the WAR file is not 2_2_1.  I
located the xercesImpl jar file in the private folder vs. the libs
folder.  The grant *possibly* should be:

grant codeBase "file:${oxf.home}${/}WEB-INF${/}lib
${/}private{/}xercesImpl_2_6_2_orbeon.jar" {

2: We appear to be using a newer version of log4j: log4j-1.3alpha0.jar

3: It looks like Orbeon is using a private version of dom4j:
dom4j-1_4_orbeon.jar

4: The version of hsqldb appears to be both different as well as the
file name itself.  The grant *possibly* should be:

grant codeBase "file:${oxf.home}${/}WEB-INF${/}lib
${/}hsqldb-1_7_2_8_orbeon.jar" {

5: I've looked thru the WAR file and can not locate jing-2003_01_31.jar

6: The version of jfreechart is changed.  We're using
jfreechart-0_9_18.jar

7: The axis modules are now version 1_2_1

8: The commons-fileupload module is up to version 1.0

9: During system startup, I get the following:

13 Dec 2005 13:26:44,123 [main] ERROR org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/ops]  - Servlet /ops threw load() exception
java.security.AccessControlException: access denied (java.lang.RuntimePermission setContextClassLoader)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.Thread.setContextClassLoader(Thread.java:1306)
        at org.orbeon.oxf.servlet.OXFServlet.init(OXFServlet.java:61)

The only way I can get rid of this is to include:

permission java.lang.RuntimePermission "setContextClassLoader";

I am, however, unsure which codeBase to include this with.




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws