Return-Path: 
 <user-return-59740-apmail-ant-user-archive=ant.apache.org@ant.apache.org>
Delivered-To: apmail-ant-user-archive@www.apache.org
Received: (qmail 81759 invoked from network); 11 Feb 2007 19:08:03 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 11 Feb 2007 19:08:03 -0000
Received: (qmail 25287 invoked by uid 500); 11 Feb 2007 19:08:05 -0000
Delivered-To: apmail-ant-user-archive@ant.apache.org
Received: (qmail 24838 invoked by uid 500); 11 Feb 2007 19:08:03 -0000
Mailing-List: contact user-help@ant.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:user-unsubscribe@ant.apache.org>
List-Help: <mailto:user-help@ant.apache.org>
List-Post: <mailto:user@ant.apache.org>
List-Id: "Ant Users List" <user.ant.apache.org>
Reply-To: "Ant Users List" <user@ant.apache.org>
Delivered-To: mailing list user@ant.apache.org
Received: (qmail 24824 invoked by uid 99); 11 Feb 2007 19:08:03 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 11 Feb 2007 11:08:02 -0800
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: local policy)
Received: from [82.165.250.195] (HELO u15187095.onlinehome-server.com)
 (82.165.250.195)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 11 Feb 2007 11:07:52 -0800
Received: (qmail 10786 invoked from network); 11 Feb 2007 14:06:45 -0500
Received: from ip70-187-196-88.dc.dc.cox.net (HELO falcon) (70.187.196.88)
  by u15187095.onlinehome-server.com with (DHE-RSA-AES256-SHA encrypted) SMTP;
 11 Feb 2007 14:06:45 -0500
Received: by falcon (Postfix, from userid 1000)
	id 668FECF9B4; Sun, 11 Feb 2007 14:07:31 -0500 (EST)
Date: Sun, 11 Feb 2007 14:07:31 -0500
From: Jing Xue <jingxue@digizenstudio.com>
To: Ant Users <user@ant.apache.org>
Subject: java task and permissions in 1.7.0
Message-ID: <20070211190731.GA14788@falcon.digizenstudio.com>
Mail-Followup-To: Ant Users <user@ant.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.12-2006-07-14
X-Virus-Checked: Checked by ClamAV on apache.org

Hi,

This task has been working fine until I recently upgraded to 1.7.0:

  <target name="usage" description="This usage help">
    <java classname="org.apache.tools.ant.launch.Launcher">
      <arg value="-projecthelp"/>
    </java>
  </target> 

In 1.7.0, I get the "exitVM disallowed" error. So I changed it to:

  <target name="usage" description="This usage help">
    <java classname="org.apache.tools.ant.launch.Launcher">
      <arg value="-projecthelp"/>
      <permissions>
        <grant class="java.lang.RuntimePermission" name="exitVM.*"/>
      </permissions>
    </java>
  </target> 
and got:
 java.lang.SecurityException: Permission
 (java.util.PropertyPermission ant.home read) was not granted.

So here goes my _first question_: I thought any explicitly
granted/revoked permissions were accumulative on top of the base set?

Then I tried granting AllPermission:

  <target name="usage" description="This usage help">
    <java classname="org.apache.tools.ant.launch.Launcher">
      <arg value="-projecthelp"/>
      <permissions>
        <grant class="java.security.AllPermission"/>
      </permissions>
    </java>
  </target> 
and got the same error:
 java.lang.SecurityException: Permission
 (java.util.PropertyPermission ant.home read) was not granted.

So my _second question_ is quite obvious: why doesn't AllPermission
grant, well, all the permissions?

In the end I had to work around by adding fork="true" clonevm="true",
but it just looks silly to fork a vm in order to print out project help.

Thanks for any hint as to what I'm missing here.
-- 
Jing Xue

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
For additional commands, e-mail: user-help@ant.apache.org