Return-Path: Delivered-To: apmail-commons-user-archive@www.apache.org Received: (qmail 42627 invoked from network); 29 May 2008 22:02:30 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 29 May 2008 22:02:30 -0000 Received: (qmail 83127 invoked by uid 500); 29 May 2008 22:02:31 -0000 Delivered-To: apmail-commons-user-archive@commons.apache.org Received: (qmail 82165 invoked by uid 500); 29 May 2008 22:02:28 -0000 Mailing-List: contact user-help@commons.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Commons Users List" Delivered-To: mailing list user@commons.apache.org Received: (qmail 82154 invoked by uid 99); 29 May 2008 22:02:28 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 29 May 2008 15:02:28 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of wwagner4@gmail.com designates 74.125.46.158 as permitted sender) Received: from [74.125.46.158] (HELO yw-out-1718.google.com) (74.125.46.158) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 29 May 2008 22:01:41 +0000 Received: by yw-out-1718.google.com with SMTP id 9so2054083ywk.60 for ; Thu, 29 May 2008 15:01:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=a+1SjSQkY2nc8XC+gW8QcGhxLQFSoc5i5ben3NBx4dQ=; b=klQYHWtKCXz9nP1IXcnZTR+kIEY+pG2ugxOcH+MBk9Bbx2zO9BLnRlzO7s/PhW7VEd+zj2ncoXVnrMqwGO9AW70l+Ot9eZt5xIK3+Au+6QQ/f/3bIA7cVkYzb2f882jZTxVsjoDMdNNdc5ZAxn9N4/HW1+EMKekFBElRlPviZSY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=wSlpXgzRPHEVkCQ7VrzyHEJGMnWRxwcAzVNq4rPdkMEUl9VVQV+94m4cSox59MDRfH12PbwLFpByodalrSp3HWLUVisWnme6WCDGB2iJJnPAh0iJC96p+U+jQwBK8jYt8/Usn/tTUlgv5MAa94MCNDWDRy30SkeQByN+GIAx9Z4= Received: by 10.142.194.4 with SMTP id r4mr129497wff.145.1212098511594; Thu, 29 May 2008 15:01:51 -0700 (PDT) Received: by 10.142.216.16 with HTTP; Thu, 29 May 2008 15:01:51 -0700 (PDT) Message-ID: Date: Fri, 30 May 2008 00:01:51 +0200 From: "Wolfgang Wagner" To: "Commons Users List" Subject: Re: [commons-logging] cannot use commons-logging (or any library that uses it) in secure client In-Reply-To: <483D0EAA.3040704@chello.at> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <483D0EAA.3040704@chello.at> X-Virus-Checked: Checked by ClamAV on apache.org Thanks that helped 2008/5/28 simon.kitching@chello.at : > Wolfgang Wagner schrieb: >> Hi >> I have a problem starting my client in a secure context when I use a >> library that uses commons-logging. (e.g. spring) >> >> Exception in thread "AWT-EventQueue-0" java.lang.ExceptionInInitializerError >> at org.springframework.util.ClassUtils.(Class Utils.java:73) >> at org.springframework.core.io.DefaultResourceLoader. >> (DefaultResourceLoader.java:52) >> (...) >> at java.awt.EventDispatchThread.pumpEvents(Unknown Source) >> at java.awt.EventDispatchThread.pumpEvents(Unknown Source) >> at java.awt.EventDispatchThread.run(Unknown Source) >> Caused by: java.security.AccessControlException: access denied >> (java.util.PropertyPermission >> org.apache.commons.logging.LogFactory.HashtableImp l read) >> at java.security.AccessControlContext.checkPermission (Unknown Source) >> at java.security.AccessController.checkPermission(Unk nown Source) >> at java.lang.SecurityManager.checkPermission(Unknown Source) >> at java.lang.SecurityManager.checkPropertyAccess(Unkn own Source) >> at java.lang.System.getProperty(Unknown Source) >> at org.apache.commons.logging.LogFactory.createFactor >> yStore(LogFactory.java:320) >> at org.apache.commons.logging.LogFactory.(Log Factory.java:1725) >> ... 34 more >> >> private static final Hashtable createFactoryStore() { >> Hashtable result = null; >> String storeImplementationClass >> = System.getProperty(HASHTABLE_IMPLEMENTATION_PROPER TY); >> if (storeImplementationClass == null) { >> storeImplementationClass = WEAK_HASHTABLE_CLASSNAME; >> >> >> I do not get the Problem If I sign the jars and use the >> 'permision-all' tag in my jnlp, but that is not what I want. >> >> Does anyone have an idea how to overcome that problem ??? >> > > Are you using commons-logging version 1.1.1? If not, then try it as > there was a security-related problem fixed in that release (see release > notes). > > Regards, > Simon > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: user-unsubscribe@commons.apache.org > For additional commands, e-mail: user-help@commons.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscribe@commons.apache.org For additional commands, e-mail: user-help@commons.apache.org