Exception with rule based security

[swd847]

I keep getting an exception when I try and use use based security. I have following the directions in the docs, but I keep getting an exception:

16:21:02,557 ERROR [STDERR] StringTemplate: problem parsing group <unknown>: java.lang.ClassCastException: antlr.CommonToken
16:21:02,562 ERROR [STDERR] java.lang.ClassCastException: antlr.CommonToken
16:21:02,569 ERROR [STDERR] at antlr.CharScanner.makeToken(CharScanner.java:173)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.language.GroupLexer.mID(GroupLexer.java:333)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.language.GroupLexer.nextToken(GroupLexer.java:103)
16:21:02,569 ERROR [STDERR] at antlr.TokenBuffer.fill(TokenBuffer.java:69)
16:21:02,569 ERROR [STDERR] at antlr.TokenBuffer.LA(TokenBuffer.java:80)
16:21:02,569 ERROR [STDERR] at antlr.LLkParser.LA(LLkParser.java:52)
16:21:02,569 ERROR [STDERR] at antlr.Parser.match(Parser.java:210)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.language.GroupParser.group(GroupParser.java:117)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.StringTemplateGroup.parseGroup(StringTemplateGroup.java:754)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.StringTemplateGroup.<init>(StringTemplateGroup.java:264)
16:21:02,569 ERROR [STDERR] at org.antlr.stringtemplate.StringTemplateGroup.<init>(StringTemplateGroup.java:244)
16:21:02,569 ERROR [STDERR] at org.drools.semantics.java.RuleBuilder.<clinit>(Unknown Source)
16:21:02,569 ERROR [STDERR] at org.drools.compiler.PackageBuilder.addRule(Unknown Source)
16:21:02,570 ERROR [STDERR] at org.drools.compiler.PackageBuilder.addPackage(Unknown Source)
16:21:02,570 ERROR [STDERR] at org.jboss.seam.drools.RuleBase.compileRuleBase(RuleBase.java:64)

I also get this exception further down:

java.lang.IllegalArgumentException: Can't find template consequenceMethod.st
 at org.antlr.stringtemplate.StringTemplateGroup.lookupTemplate(StringTemplateGroup.java:477)
 at org.antlr.stringtemplate.StringTemplateGroup.getInstanceOf(StringTemplateGroup.java:364)
 at org.antlr.stringtemplate.StringTemplateGroup.getInstanceOf(StringTemplateGroup.java:376)
 at org.drools.semantics.java.RuleBuilder.buildConsequence(Unknown Source)
 at org.drools.semantics.java.RuleBuilder.build(Unknown Source)
 at org.drools.semantics.java.RuleBuilder.build(Unknown Source)
 at org.drools.compiler.PackageBuilder.addRule(Unknown Source)
 at org.drools.compiler.PackageBuilder.addPackage(Unknown Source)
 at org.jboss.seam.drools.RuleBase.compileRuleBase(RuleBase.java:64)

I do not get the error if the rule file is mostly empty (no rules, just the package declaration and imports), however as soon as I add a rule I get this exception.
I am sure it must be something simple but I can't think what it could be.

Stuart

[shane.bryzak]

It looks like it is finding more than one version of antlr in the classpath. Is your app configured with its own classloader repository?

[swd847]

I am not using a custom loader, and I don't think I have different versions of antlr in the classpath, just antlr-3.0ea8.jar and antlr-2.7.6.jar .

[shane.bryzak]

What's in your jboss-app.xml file?

[swd847]

<jboss-app>
 <loader-repository>
 seam.jboss.org:loader=myprogram
 </loader-repository>
</jboss-app>

[shane.bryzak]

Are there any other deployments using "myprogram" as the classloader name?

Also, can you post the contents of your rule file with the security rule/s in it?

[swd847]

I got it, there was the another copy of the same version of the antlr jars on the classpath.

However, now I get the following:

12:20:16,037 ERROR [[/brgjava]] Session event listener threw exception
org.drools.rule.InvalidRulePackage: Unable to create Field Extractor for 'name'
Unable to create Field Extractor for 'action'
Unable to create Field Extractor for 'name'

 at org.drools.rule.Package.checkValidity(Unknown Source)
 at org.drools.common.AbstractRuleBase.addPackage(Unknown Source)
 at org.jboss.seam.drools.RuleBase.compileRuleBase(RuleBase.java:70)

My rules file is from the example:

package MyApplicationPermissions;

import org.jboss.seam.security.PermissionCheck;
import org.jboss.seam.security.Role;

rule CanUserDeleteCustomers
when
 c: PermissionCheck(name == "customer", action == "delete")
 Role(name == "admin")
then
 c.grant();
end;

[shane.bryzak]

I'm not sure about that error. I'll see if I can get one of the Drools guys to take a peek.

[swd847]

Don't worry, I've fixed this as well