0003657: JSP CodeSource for security manager

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0003657

[Resin]

minor

always

08-28-09 09:04

08-31-09 15:13

Reporter

ferg

View Status

public

Assigned To

ferg

Priority

normal

Resolution

fixed

Status

closed

Product Version

Summary

0003657: JSP CodeSource for security manager

Description

(rep by Kai Virkki)

We are trying to use SecurityManager with Resin 3.1.9 and run into the
following problem: CodeSource.getLocation() returns null for compiled
JSPs.

This means that we cannot use a specific codebase in grant clause in
our policy file, for example:

grant codeBase "file:/path_to_resin/runtime/work/-" {
OR grant codeBase "file:/path_to_resin/webapp/JSP-source/-" {
...some jsp-specific permissions
};

Instead, we have to use a universal grant clause:
grant {
..some jsp-specific permissions. Unfortunately, these will be applied
to all code!!!
};

Is there a way to make JSPs have a proper CodeSource?

Additional Information

Attached Files

Relationships

Notes
(0004209) ferg 08-31-09 15:13	jsp/178f

Issue History
Date Modified	Username	Field	Change
08-28-09 09:04	ferg	New Issue
08-31-09 15:13	ferg	Note Added: 0004209
08-31-09 15:13	ferg	Assigned To	=> ferg
08-31-09 15:13	ferg	Status	new => closed
08-31-09 15:13	ferg	Resolution	open => fixed
08-31-09 15:13	ferg	Fixed in Version	=> 4.0.2

Mantis 1.0.0rc3[^]

28 total queries executed.
25 unique queries executed.