3 Replies Latest reply on Feb 22, 2005 3:08 AM by simon.g

Different protection domains for server and application depl

simon.g Feb 16, 2005 2:49 PM

Hi all

I would like to run JBoss 4.0 with a policy file which grants different Permissions to different Codebases. I would in particular like to grant different Permissions to server deployment modules (e.g. tomcat.sar) deployed in server/default/deploy, and application deployment modules, which we deploy into a different, additional deployment directory.

Since all deployed archives are copied in the server tmp directory, I cannot work with different codebases. I guess I probably could use a second MainDeployer which works with SubDeployers, which know not to user the default server temp directory. But then again I have been told not to use more then one MainDeployer ...

Does anybody have a better idea?

Any help would be appreciated.
Simon

1. Re: Different protection domains for server and application

adrian.brock Feb 18, 2005 5:50 PM (in response to simon.g)

JBoss uses the original deployment urls, not the tmp urls.

From org.jboss.mx.loading.UnifiedClassLoader

 /**
 * Determine the protection domain. If we are a copy of the original
 * deployment, use the original url as the codebase.
 * @return the protection domain
 * @todo certificates and principles?
 */
 protected ProtectionDomain getProtectionDomain()
 {
 return getProtectionDomain(origURL != null ? origURL : url);
 }

2. Re: Different protection domains for server and application

starksm64 Feb 21, 2005 1:18 PM (in response to simon.g)

Right, we have unit tests that run with a security manager and the codebases in the permission are the original urls, not the tmp directory location.
Actions
3. Re: Different protection domains for server and application

simon.g Feb 22, 2005 3:08 AM (in response to simon.g)

Great to know, thanks a lot.

Simon
Actions

Go to original post