Clifford Harms created an issue |
Issue Type: |
Bug |
---|---|
Affects Versions: |
2.13.3 |
Assignee: |
Unassigned |
Created: |
10/Dec/18 8:00 PM |
Environment: |
Redhat Enterprise Linux 6/7, Java 8, Java SecurityManager enabled |
Priority: |
Medium |
Reporter: |
Around GeoServer 2.11, improvements were made to GeoServer configuration loading in order to improve startup speeds. The improvement appears to be implemented, in part, by using
to perform IO tasks concurrently. The problem with this is that, by default, concurrent streaming API operations use the JVM ForkJoinPool to do their work. This pool, again by default, creates threads that do not inherit the permissions of the caller. In fact they have no permissions at all ( see ForkJoinPool docs ). This ultimately causes GeoServer catalog initialization code (and potentially other code in GeoServer) that runs in parallel streams to fail when a security manager is enabled, no matter what permissions are assigned. A potential solution:
(I have not verified that this works yet) |
Get Jira notifications on your phone! Download the Jira Cloud app for Android or iOS |
|
This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100095-sha1:3406b11) |