[Geoserver-devel] [jira] Created: (GEOS-1796) access denied (java.io.FilePermission data/nyc/giant_polygon.shp read)

access denied (java.io.FilePermission data/nyc/giant_polygon.shp read)
----------------------------------------------------------------------

                 Key: GEOS-1796
                 URL: http://jira.codehaus.org/browse/GEOS-1796
             Project: GeoServer
          Issue Type: Bug
    Affects Versions: 1.6.1
         Environment: Apache Tomcat/5.5 1.6.0_03-b05 Sun Microsystems Inc. Linux 2.6.22-14-xen amd64
            Reporter: Scot E. Wilcoxon
            Assignee: Andrea Aime
            Priority: Blocker

Trying to edit an existing feature type is not allowed.

http://pcann04.pcann.com:8180/geoserver/config/data/typeSelectSubmit.do

HTTP Status 500 -

type Exception report

message

description The server encountered an internal error () that prevented it from fulfilling this request.

exception

javax.servlet.ServletException: ServletException in '/WEB-INF/pages/data/featureTypes/Editor.jsp': access denied (java.io.FilePermission data/nyc/giant_polygon.shp read)
  org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:841)
  org.apache.jasper.runtime.PageContextImpl.access$11(PageContextImpl.java:779)
  org.apache.jasper.runtime.PageContextImpl$12.run(PageContextImpl.java:761)
  java.security.AccessController.doPrivileged(Native Method)
  org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:759)
  org.apache.jsp.WEB_002dINF.pages.layouts.mainLayout_jsp._jspService(mainLayout_jsp.java:667)
  org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:331)
  org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:329)
  org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.doForward(MultipleDelegatingTilesRequestProcessor.java:346)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processTilesDefinition(MultipleDelegatingTilesRequestProcessor.java:212)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processForwardConfig(MultipleDelegatingTilesRequestProcessor.java:81)
  org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
  org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
  org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.doForward(MultipleDelegatingTilesRequestProcessor.java:346)
  org.apache.struts.action.RequestProcessor.processForwardConfig(RequestProcessor.java:398)
  org.apache.struts.tiles.TilesRequestProcessor.processForwardConfig(TilesRequestProcessor.java:318)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processForwardConfig(MultipleDelegatingTilesRequestProcessor.java:95)
  org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
  org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
  org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:108)
  sun.reflect.GeneratedMethodAccessor279.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.geoserver.filters.LoggingFilter.doFilter(LoggingFilter.java:69)
  sun.reflect.GeneratedMethodAccessor278.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.geoserver.filters.GZIPFilter.doFilter(GZIPFilter.java:41)
  sun.reflect.GeneratedMethodAccessor277.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:264)
  org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:107)
  org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:110)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:81)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:217)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.logout.LogoutFilter.doFilter(LogoutFilter.java:106)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:229)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:148)
  org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:98)
  sun.reflect.GeneratedMethodAccessor276.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)

root cause

javax.servlet.jsp.JspException: ServletException in '/WEB-INF/pages/data/featureTypes/Editor.jsp': access denied (java.io.FilePermission data/nyc/giant_polygon.shp read)
  org.apache.struts.taglib.tiles.InsertTag$InsertHandler.doEndTag(InsertTag.java:923)
  org.apache.struts.taglib.tiles.InsertTag.doEndTag(InsertTag.java:462)
  org.apache.jsp.WEB_002dINF.pages.layouts.mainLayout_jsp._jspx_meth_tiles_005finsert_005f7(mainLayout_jsp.java:1402)
  org.apache.jsp.WEB_002dINF.pages.layouts.mainLayout_jsp._jspService(mainLayout_jsp.java:639)
  org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:331)
  org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:329)
  org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.doForward(MultipleDelegatingTilesRequestProcessor.java:346)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processTilesDefinition(MultipleDelegatingTilesRequestProcessor.java:212)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processForwardConfig(MultipleDelegatingTilesRequestProcessor.java:81)
  org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
  org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
  org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.doForward(MultipleDelegatingTilesRequestProcessor.java:346)
  org.apache.struts.action.RequestProcessor.processForwardConfig(RequestProcessor.java:398)
  org.apache.struts.tiles.TilesRequestProcessor.processForwardConfig(TilesRequestProcessor.java:318)
  org.vfny.geoserver.config.web.tiles.MultipleDelegatingTilesRequestProcessor.processForwardConfig(MultipleDelegatingTilesRequestProcessor.java:95)
  org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:241)
  org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196)
  org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
  javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
  sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:162)
  java.security.AccessController.doPrivileged(Native Method)
  org.vfny.geoserver.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:108)
  sun.reflect.GeneratedMethodAccessor279.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.geoserver.filters.LoggingFilter.doFilter(LoggingFilter.java:69)
  sun.reflect.GeneratedMethodAccessor278.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.geoserver.filters.GZIPFilter.doFilter(GZIPFilter.java:41)
  sun.reflect.GeneratedMethodAccessor277.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)
  java.security.AccessController.doPrivileged(Native Method)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:264)
  org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:107)
  org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:110)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.providers.anonymous.AnonymousProcessingFilter.doFilter(AnonymousProcessingFilter.java:125)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.rememberme.RememberMeProcessingFilter.doFilter(RememberMeProcessingFilter.java:142)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.wrapper.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:81)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:217)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.ui.logout.LogoutFilter.doFilter(LogoutFilter.java:106)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:229)
  org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:274)
  org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:148)
  org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:98)
  sun.reflect.GeneratedMethodAccessor276.invoke(Unknown Source)
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  java.lang.reflect.Method.invoke(Method.java:597)
  org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:244)
  java.security.AccessController.doPrivileged(Native Method)
  javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
  org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:276)
  org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:218)

note The full stack trace of the root cause is available in the Apache Tomcat/5.5 logs.
Apache Tomcat/5.5

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira