6 Replies Latest reply on Jun 27, 2019 2:13 PM by sabaresh5887

    Wildfly - Security-manager subsytem - enabling permission

    nikhilpkookkiri

      I am using Wildfly Security manager subsystem to set up security policies. I am not able to get the ognl.OgnlInvokePermission on any methods. E.g. I enabled ognl.OgnlInvokePermission under the minimum permission set as -

       

      <deployment-permissions>

          <minimum-set>

              <-- My Permissions collection. Not listing them here -->

              <permission class="ognl.OgnlInvokePermission" name="invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods" />

              <permission class="ognl.OgnlInvokePermission" name="invoke.org.apache.struts2.result.StrutsResultSupport.setLocation" />

              <permission class="ognl.OgnlInvokePermission" name="invoke.com.opensymphony.xwork2.ActionSupport.execute" />

         </minimum-set>

      </deployment-permissions>

       

      Here is the stack trace I got:

       

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.org.apache.struts2.result.StrutsResultSupport.setLocation")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.org.apache.struts2.result.StrutsResultSupport.setLocation")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

      Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")

       

      Kindly let me  know how to resolve this permission issue.