Wildfly - Security-manager subsytem - enabling permission
nikhilpkookkiri May 14, 2018 12:50 PMI am using Wildfly Security manager subsystem to set up security policies. I am not able to get the ognl.OgnlInvokePermission on any methods. E.g. I enabled ognl.OgnlInvokePermission under the minimum permission set as -
<deployment-permissions>
<minimum-set>
<-- My Permissions collection. Not listing them here -->
<permission class="ognl.OgnlInvokePermission" name="invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods" />
<permission class="ognl.OgnlInvokePermission" name="invoke.org.apache.struts2.result.StrutsResultSupport.setLocation" />
<permission class="ognl.OgnlInvokePermission" name="invoke.com.opensymphony.xwork2.ActionSupport.execute" />
</minimum-set>
</deployment-permissions>
Here is the stack trace I got:
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.setExcludeMethods")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.org.apache.struts2.result.StrutsResultSupport.setLocation")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.org.apache.struts2.result.StrutsResultSupport.setLocation")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/ognl-3.1.15.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/lib/struts2-core-2.5.16.jar <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Permission check failed (permission "("ognl.OgnlInvokePermission" "invoke.com.opensymphony.xwork2.ActionSupport.execute")" in code source "(vfs:/C:/wildfly-12.0.0.Final/bin/content/myear.ear/web.war/WEB-INF/classes <no signer certificates>)" of "ModuleClassLoader for Module "deployment.myear.ear.web.war" from Service Module Loader")
Kindly let me know how to resolve this permission issue.