3 Replies Latest reply on Nov 24, 2012 1:25 PM by maxmil

JBoss AS 7 logs exception multiple times

electrodraco Aug 13, 2012 6:17 AM

I'm using JBoss AS 7.1.1.Final with the default logging configuration (with standalone-full.xml).

I wrote a CDI-Interceptor which throws an exception whenever the current user isn't permitted to call the intercepted method.

The problem is: These exception gets logged 4 times by different components in JBoss AS 7. That's more than 80'000 characters per exceptions, which is not acceptable for my virtual machine with 10 GB disk space. I would be vulnerable to attacks.

The 4 log entries are (shows up in this order in the log):

11:41:11,984 ERROR [org.jboss.ejb3.invocation] (LoggingInterceptor.java processInvocation 66) JBAS014134: EJB Invocation failed on component DocumentRepository for method public java.util.List org.example.repositories.DocumentRepository.getAllDocuments(): {Exception and Stacktrace}
11:41:12,028 SEVERE [javax.enterprise.resource.webcontainer.jsf.application] (FaceletViewHandlingStrategy.java handleRenderException 965) Error Rendering View[/views/documents.xhtml]: {Exception and Stacktrace}
11:41:12,062 ERROR [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/backend].[Faces Servlet]] (ApplicationDispatcher.java invoke 857) Servlet.service() for servlet Faces Servlet threw exception: {Exception and Stacktrace}
11:41:12,097 ERROR [org.apache.catalina.core.ContainerBase.[jboss.web].[default-host].[/backend].[default]] (StandardWrapperValve.java invoke 309) Servlet.service() for servlet default threw exception: {Exception and Stacktrace}

The exception is identically for each entry and is the one thrown by the interceptor:

org.example.security.SecurityException: Cannot access resource with role [null]!

at org.example.security.SecurityInterceptor.checkPermissions(SecurityInterceptor.java:28) [example-common-0.0.1-SNAPSHOT.jar:]

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.6.0_24]

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.6.0_24]

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.6.0_24]

at java.lang.reflect.Method.invoke(Method.java:616) [rt.jar:1.6.0_24]

at org.jboss.interceptor.proxy.InterceptorInvocation$InterceptorMethodInvocation.invoke(InterceptorInvocation.java:72) [jboss-interceptor-core-2.0.0.Final.jar:2.0.0.Final]

at org.jboss.interceptor.proxy.SimpleInterceptionChain.invokeNextInterceptor(SimpleInterceptionChain.java:82) [jboss-interceptor-core-2.0.0.Final.jar:2.0.0.Final]

at org.jboss.weld.bean.InterceptorImpl.intercept(InterceptorImpl.java:90) [weld-core-1.1.5.AS71.Final.jar:2012-02-10 15:31]

at org.jboss.as.weld.ejb.DelegatingInterceptorInvocationContext.proceed(DelegatingInterceptorInvocationContext.java:71) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]

at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:112) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]

at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:125) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]

at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:135) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]

at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]