Fwd: All-Permissions not working properly with sun.plugin2.applet.FXAppletSecurityManager

[Thomas Ng]

Thanks for the report!

Two bugs created for this:

security manager and applet-desc webstart mode: 
https://bugs.openjdk.java.net/browse/JDK-8040231

reflection in daemon thread: 
https://bugs.openjdk.java.net/browse/JDK-8040699

-thomas

>> *From: *Scott Palmer <swpalmer at gmail.com <mailto:swpalmer at gmail.com>>
>> *Subject: **All-Permissions not working properly with 
>> sun.plugin2.applet.FXAppletSecurityManager*
>> *Date: *April 14, 2014 at 1:07:36 PM PDT
>> *To: *"openjfx-dev at openjdk.java.net 
>> <mailto:openjfx-dev at openjdk.java.net>" <openjfx-dev at openjdk.java.net 
>> <mailto:openjfx-dev at openjdk.java.net>>
>>
>> Can someone confirm that all-permissions is working for JavaFX apps
>> that are launched via Web Start with Java 8.0 and use daemon threads
>> in a Service?
>>
>> I have a JNLP file that has:
>> <security>
>>  <all-permissions/>
>> </security>
>>
>> and the manifest of my app's jar has the following instruction in my
>> Gradle script:
>>
>> jar {
>>    manifest {
>>        attributes('Permissions': 'all-permissions',
>>                   'Codebase': '*')
>>    }
>> }
>>
>> I'm using the javafx gradle plugin and signing the jars...
>> e.g. I see this for every dependency and the main jar:
>> ...
>> Signing (BLOB) C:\Users\scott\.m2\caches\path\to\some.jar
>> Signed as C:\Users\scott\dev\MyProject\build\libs\some.jar
>> ...
>>
>> I even tried System.setSecurityManager(null); in my start() method
>> (and it lets me do it).
>>
>> However, daemon threads started by my Service are unable to use
>> reflection. (It is working in the main FX application thread.)  I see
>> the following stack trace in the Java console:
>>
>>
>> Caused by: java.security.AccessControlException: access denied
>> ("java.lang.reflect.ReflectPermission" "suppressAccessChecks")
>> at java.security.AccessControlContext.checkPermission(Unknown Source)
>> at java.security.AccessController.checkPermission(Unknown Source)
>> at java.lang.SecurityManager.checkPermission(Unknown Source)
>> at sun.plugin2.applet.FXAppletSecurityManager.checkPermission(Unknown 
>> Source)
>> at java.lang.reflect.AccessibleObject.setAccessible(Unknown Source)
>>
>>
>> Caused by: java.security.AccessControlException: access denied
>> ("java.lang.RuntimePermission" "accessDeclaredMembers")
>> at java.security.AccessControlContext.checkPermission(Unknown Source)
>> at java.security.AccessController.checkPermission(Unknown Source)
>> at java.lang.SecurityManager.checkPermission(Unknown Source)
>> at sun.plugin2.applet.FXAppletSecurityManager.checkPermission(Unknown 
>> Source)
>> at java.lang.Class.checkMemberAccess(Unknown Source)
>> at java.lang.Class.getDeclaredMethod(Unknown Source)
>> at 
>> ma.glasnost.orika.property.PropertyResolver.resolvePropertyType(PropertyResolver.java:304)
>> at 
>> ma.glasnost.orika.property.PropertyResolver.processProperty(PropertyResolver.java:240)
>> at 
>> ma.glasnost.orika.property.IntrospectorPropertyResolver.collectProperties(IntrospectorPropertyResolver.java:83)
>> ... 33 more
>>
>> I bring it up here because FXAppletSecurityManager is involved and
>> this smells like a possible bug in plugin2
>>
>> Regards,
>>
>> Scott
>