Avoiding stack overflow in PersistentPermissionResolver

[sflanigan]

In our application, we've got a RuleBasedPermissionResolver (security.drl), but if none of the rules happens to grant a permission on a given check, it falls back on the PersistentPermissionResolver and ends up in infinite recursion (detectable in a debugger) - http://pastebin.org/369542
and a (spurious?) NoClassDefFoundError: org/hibernate/hql/QueryExecutionRequestException (if you just look in the log) - http://pastebin.org/369538

This problem sounds quite similar: http://seamframework.org/Community/StackOverflowProblemWhileUsingRestrictInConjuctionWithPreUpdateAndAPersistentPermissionResolver

How can I stop the flush/permission check/flush cycle?

Here's a bad attention-seeking idea: how about I override Identity.hasPermission(..) to return true when called recursively?

[sflanigan]

BTW, I'm using maven-war-plugin for packaging.  But I think the NoClassDefFoundError is a red herring because the stack trace shows that plenty of other classes from hibernate-core have been loaded, including org.hibernate.impl.SessionImpl.  And I have verified that QueryExecutionRequestException.class is deployed in WEB-INF/lib/hibernate-core*.jar.

[sflanigan]

The @PreUpdate workaround from http://seamframework.org/Community/StackOverflowProblemWhileUsingRestrictInConjuctionWithPreUpdateAndAPersistentPermissionResolver did prevent the StackOverflowError, but we decided to get rid of the persistent permissions (by removing security:jpa-permission-store from components.xml) since we don't have a real need for them.