Can JVM security policy be modified to access field values of private field

Can JVM security policy be modified to access field values of "private" field in a Class?

See http://developer.java.sun.com/developer/onlineTraining/Programming/JDCBook/appA.html#ReflectPermission.
Note that you will have to use reflection to access the fields once the security policy allows you to supress the access controls.
Chuck

Similar Messages

How to access the value of a field of a field symbol.

Hello All,
i need to access the value of a field in a field symbol. But when i am trying to get the value like <FS>-POSNR, it's showing that that the <FS> has no structure.
In my program, the field itself that i need to check should be dynamic. ie i'll get the field in a variable and i need to find the value of that field.
Am pasting my code below, please tell me what needs to be done.
here in my sample code i am moving the entry of the <FS> into a work area structure. But in my actual program, i gets the structure as a parameter. So is there any way i can declare a work area dynamically...
FUNCTION z_39181_dyn_fs_60758.
""Local interface:
*" IMPORTING
*" REFERENCE(PARAMETER) TYPE VBELN
*" TABLES
*" DATA_TAB
BREAK-POINT.
FIELD-SYMBOLS <fs> TYPE ANY.
FIELD-SYMBOLS <fs1> TYPE ANY.
FIELD-SYMBOLS <fstab> TYPE ANY TABLE.
DATA name(5) VALUE 'POSNR'.
FIELD-SYMBOLS <f> TYPE ANY.
DATA: dref TYPE REF TO data,
 dref1 TYPE REF TO data,
 dref2 TYPE REF TO data.
DATA: lv_lips TYPE string.
DATA: lv_lipsfld TYPE string,
 lv_fld TYPE string,
 lw_lips TYPE lips.
 lv_lips = 'LIPS'.
 lv_fld = 'LW_lips-POSNR'.
CREATE DATA dref1 TYPE (lv_lips).
CREATE DATA dref TYPE STANDARD TABLE OF (lv_lips).
CREATE DATA dref2 LIKE LINE OF data_tab.
ASSIGN dref->* TO <fstab>.
ASSIGN dref1->* TO <fs>.
assign dref2->* to <fs
<fstab> = data_tab[].
LOOP AT <fstab> INTO <fs>.
 lw_lips = <fs>.
 WRITE lw_lips-vbeln.
 ASSIGN (lv_fld) TO <fs1>.
 write <fs>
ENDLOOP.
Helpful answers will be rewarded...

Use syntax
ASSIGN COMPONENT name OF STRUCTURE struc TO <fs>.

Accessing the field values in different fields for calculation

Hi,
I am creating a report in which I have used breaks for grouping the customers by their category. I have used summary on the amount field to calculate the sum in the individual category and also for total amount.
Now, I also want to add an column which could display the percentages of individual contributions.
So, its like I have to write a query accessing the total percentage, categorized percentage and individual amount.
My question: How can I access the various fields values in the query of some other field specifically sum and total sum( because it shows the sum([Amount]) for category sum and total sum both)
-BOBJuser

Hmmm, I assume you are talking about WebIntelligence here...
Ok, so let's go: you can access every "object" in the report simply by it's name. Every cell contains either a constant value (e.g. some text) or a formula, the simplest one can be just the value of an "object" from the query.
There is a formula bar on top which you can activate, where you can easily see the content of a specific cell and also copy/paste the formula from the cell, as well as access all the built-in functions.
WebI has a built-in calculator which works very similar to a "micro" olap engine, so you can access every sort of aggregate (of a measure) via a correspondig formula, irrelevant in which cell you are using it.
Nevertheless, there is a "computation context" which depends on the place where you put the formula, e.g. summary row, detail row, etc.
for more info: see the manual )
hth, Walter

To access the value of the fields in selection screen

Hi,
I have used PNP Logical database in the report and also I have created a Report category with organizational unit,begin date and end date.so in my selection screen,I have these three fields.
Now i need to get the value of those fields in the program..so I need to how to get the value of these fields.
Regards,
Kiruthi

Hi Kiruthi,
Goto SM31 -> V_T599F.
Write down your report category.
There u'll see the technical names of the selection screen fields.
You can use PNPXXXX name in your report.
Best regards,
Dilek

How do I copy over "Created By" & "Modified By" field values to a new library, using PowerShell?

I have a site that was migrated from SP 2007 to 2013, using a docave tool...this works fine and everything seems to be okay. However I now have to move documents from one Library to a new one, along with all associated metadata. I have a PowerShell script
I am using to do this and it is working...for the most part...except for copying the authoring metadata. So when I run this PowerShell script, I get my "Created By" and "Modified By" fields updated with the "WindowsAccount" user
account that performed the migration. This is what is confusing to me...after the migration, when I look at my Library, these fields are displayed correctly. Meaning I have documents that were created by John Smith, and modified by Jane Smith, showing up with
the right metadata in the library after migration...but when I run my script to copy the documents to a new library, the output is not John Smith or Jane Smith but the "windowsAccount" user that performed the migration. Here is what my script looks
like, in trying to get the right values to show.
$sWeb = Get-SPWeb $SourceWebURL
$sList = $sWeb.Lists | ? {$_.Title -eq $SourceLibraryTitle}
$dWeb = Get-SPWeb $DestinationWebURL
$dList = $dWeb.Lists | ? {$_.title -like $DestinationLibraryTitle}
$AllFolders = $sList.Folders
$RootFolder = $sList.RootFolder
$RootItems = $RootFolder.files
foreach($RootItem in $RootItems){
$sBytes = $RootItem.OpenBinary()
$dFile = $dList.RootFolder.Files.Add($RootItem.Name, $sBytes, $true)
$AllFields = $RootItem.Item.Fields | ? {!($_.sealed)}
$User = $sWeb.EnsureUser($RootItem.Author)
$UserField = New-Object Microsoft.SharePoint.SPFieldUserValue($sWeb,$User.ID,$User.LoginName)
write-host "User's Name: "$UserField.User.Name.ToString()
Has anyone experienced something like this before? If so, what is causing this and how can I get my script to start displaying the right data for "Created By" and "Modified By"?
Thanks,

This is the expected behavior. Both "Created By" (internal name Author) and "Modified By" (internal name Editor) will be set to the user running the script. In order to update theses fields in the destination item with the values present
in source item, the script needs to be modified. Read the values of these fields in source and update them in destination using SplistItem.SystemUpdate() method, like:
$Author = $sWeb.EnsureUser($RootItem.Author) $Editor = $sWeb.EnsureUser($RootItem.Editor) $destinationItem["Author"] = $Author$destinationItem["Editor"] = $Editor$destinationItem.SytemUpdate()
Blog | SharePoint Learnings CodePlex Tools |
Export Version History To Excel |
Autocomplete Lookup Field

How to access screen field value in a module pool programming?

Hi Experts,
   I have create a module pool program SAPMYDLG. It contains two screens 100 and 200.
   The first screen contains Employee_ID field. This field is not a dictionary field.
   In the second screen 200, I want to access the value of Employee_ID field from first screen.
   For this I created a global variable v_empid in TOP include.
   Then in the PAI of the screen 100 I have assigned the screen field value to global variable.
   v_empid = Employee_ID.
   But this gives an error saying " Field Employee_ID not defined".
   What am I doing wrong? How can I access the screen field value?
Thanks
Gopal

Hi,
Employee_ID field also must u define in the top include when u define that 100 screen and 200 screen will access.
regards,
muralii

Extended/modified to accept characteristic values for BAPI_SALESORDER_CREAT

Hi All,
can any help me extended/modified to accept characteristic values for BAPI_SALESORDER_CREATFROMDAT2 BAPI.my requirement is
Exploring the standard BAPI BAPI_SALESORDER_CREATEFROMDAT2 (or any other suitable)to be extended/modified to accept characteristic values
and based on characteristic values, it should perform variant matching
and if in case variant matching is successful, the BAPI should replace the KMAT material with the exact matched variant material.In case the variant matching is unsuccessful, then retain the KMAT material in the sales order line item

Hello Nagarajan,
I have used this BAPI in my last task. You are passing the values correctly. I will tell you why it is giving like that message.
Whenever we will create a sales order in VA01 transaction, you will get a message like "The sales order is not complete, would you like to EDIT" while saving the sales order.... This is because of not providing complete data required for careation of sales order.
Try to implement the changes manually in VA02, if you get same errors, then you can find your code is correct.
Even I got same type of messages when changing a sales order to change the Rejection Reason for the items.
Best Regards,
Sasidhar Reddy Matli.
Edited by: Sasidhar Reddy Matli on Jul 31, 2008 2:20 PM

Missing class for indicator field value [changed-fields-locking-policy]

------- 
Edit: 
Please, ignore the post below. I found the problem here. The real problem is reported in my other post. 
------- 
 
Hello, 
 
In order to test the optimistic locking by fields, I created a very simple TopLink project via the TopLink Workbench. It only consists of one table that was mapped via TopLink's own "Add or Update Existing Tables from Database". I made no modifications to the automatically generated mappings. 
 
After I set up the rest of the project, I ran it and it ran okay. 
 
Then I went to the table descriptor, then to the "Locking" tab, and then I selected "Optimistic Locking" -> "By Fields" -> "Changed Fields". 
 
That was ALL I changed. 
 
And when I tried to run the project this time, I got the following exception:
<blockquote>
Exception [TOPLINK-43] (Oracle TopLink - 10g Release 3 (10.1.3.0.0) (Build 060118)): oracle.toplink.exceptions.DescriptorException
Exception Description: Missing class for indicator field value [toplink:changed-fields-locking-policy] of type [class java.lang.String]. 
Descriptor: XMLDescriptor(oracle.toplink.descriptors.VersionLockingPolicy --> [DatabaseTable(locking-policy)]) 
 at oracle.toplink.exceptions.DescriptorException.missingClassForIndicatorFieldValue(DescriptorException.java:878) 
 at oracle.toplink.internal.ox.QNameInheritancePolicy.classFromRow(QNameInheritancePolicy.java:109) 
 at oracle.toplink.mappings.foundation.AbstractCompositeObjectMapping.valueFromRow(AbstractCompositeObjectMapping.java:150) 
 at oracle.toplink.mappings.DatabaseMapping.readFromRowIntoObject(DatabaseMapping.java:1012) 
 at oracle.toplink.internal.descriptors.ObjectBuilder.buildAttributesIntoObject(ObjectBuilder.java:241) 
 at oracle.toplink.internal.ox.XMLObjectBuilder.buildObject(XMLObjectBuilder.java:128) 
 at oracle.toplink.ox.mappings.XMLCompositeCollectionMapping.buildCompositeObject(XMLCompositeCollectionMapping.java:157) 
 at oracle.toplink.mappings.foundation.AbstractCompositeCollectionMapping.valueFromRow(AbstractCompositeCollectionMapping.java:735) 
 at oracle.toplink.mappings.DatabaseMapping.readFromRowIntoObject(DatabaseMapping.java:1012) 
 at oracle.toplink.internal.descriptors.ObjectBuilder.buildAttributesIntoObject(ObjectBuilder.java:241) 
 at oracle.toplink.internal.ox.XMLObjectBuilder.buildObject(XMLObjectBuilder.java:128) 
 at oracle.toplink.internal.ox.record.DOMUnmarshaller.xmlToObject(DOMUnmarshaller.java:284) 
 at oracle.toplink.internal.ox.record.DOMUnmarshaller.xmlToObject(DOMUnmarshaller.java:265) 
 at oracle.toplink.internal.ox.record.DOMUnmarshaller.unmarshal(DOMUnmarshaller.java:152) 
 at oracle.toplink.ox.XMLUnmarshaller.unmarshal(XMLUnmarshaller.java:339) 
 at oracle.toplink.tools.workbench.XMLProjectReader.read(XMLProjectReader.java:162) 
 at oracle.toplink.tools.workbench.XMLProjectReader.read(XMLProjectReader.java:209) 
 at oracle.toplink.tools.sessionconfiguration.TopLinkSessionsFactory.loadProjectConfig(TopLinkSessionsFactory.java:307) 
 at oracle.toplink.tools.sessionconfiguration.TopLinkSessionsFactory.createSession(TopLinkSessionsFactory.java:241) 
 at oracle.toplink.tools.sessionconfiguration.TopLinkSessionsFactory.buildServerSessionConfig(TopLinkSessionsFactory.java:215) 
 at oracle.toplink.tools.sessionconfiguration.TopLinkSessionsFactory.buildSession(TopLinkSessionsFactory.java:168) 
 at oracle.toplink.tools.sessionconfiguration.TopLinkSessionsFactory.buildTopLinkSessions(TopLinkSessionsFactory.java:124) 
 at oracle.toplink.tools.sessionconfiguration.XMLSessionConfigLoader.load(XMLSessionConfigLoader.java:103)
</blockquote>
Can anybody tell me what that means? And why do I see "VersionLockingPolicy" in the stack trace? I explicitly specified locking "By Fields". 
 
Here's a fragment from the project XML file:
<blockquote>
<toplink:locking xsi:type="toplink:changed-fields-locking-policy"/>
</blockquote>
Is this a TopLink bug or am I doing something wrong? (By the way, if I choose optimistic locking by "All fields", it works. But locking by "Changed fields" doesn't.) 
 
Best regards, 
Bisser
Message was edited by:
bisser

Ooooops, sorry, guys!
I was using TopLink 10.1.3.0 JARs to run a project created via TopLink 10.1.3.1 Workbench. That was the reason for the exception.
I ran across the REAL problem, however. The one that was occurring when I created the TopLink project via JDeveloper 10.1.3.1 and ran it via JDeveloper 10.1.3.1. That's why I decided to try with TopLink 10.1.3.1 Workbench instead of JDeveloper 10.1.3.1.
I will report the problem in a clean separate post.

How to access fied value to another fied

hi experts,
how can access the one field value to onther field in a view level.

Hi,
In case its a same context node then you would have that value present in Current entity. Just use method get_property/get_property_as_value/get_property_as_string and you would get it.
Syntax:
lv_value = lr_entity->get_property_as_string( '*ATTRIBUTENAME*' ).
if its different context node of same component then please refer to below article by Suchita.
http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=201066680
Trust this solves your issue.
Regards,
BJ

Page can't be accessed due to security policy, category default-it's my homepage which has been my homepage forever.

I suddenly can't access my homepage - I get this message: "Your page is blocked due to a security policy that prohibits access to Category default ". This has been my homepage for years and I've never had this problem before.

Also do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware.
All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php
*AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/ http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
*SuperAntispyware: http://www.superantispyware.com/
*Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: http://windows.microsoft.com/en-us/windows/using-defender
*Spybot Search & Destroy: http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan: http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*Anti-rootkit utility TDSSKiller: http://support.kaspersky.com/5350?el=88446
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked
*https://support.mozilla.org/kb/troubleshoot-firefox-issues-caused-malware

How do I resolve this error in Safari Your page is blocked due to a security policy that prohibits access to Category Remote Proxies"?

I'm trying to access several pages and keep geting "Your page is blocked due to a security policy that prohibits access to Category Remote Proxies" After going over all my security stuff I just can't find where I would correct the error.
Is there anyone who could help me?
Thanks
Fr. Gary

very strange,
1. check time and date on your computer
2. reset network configuration, make sure there are no proxy servers and you get DNS from your router not manual
3. Reset certificates database
Go to Terminal (Applications>Utilities)
sudo rm /var/db/crls/*cache.db
(you will be prompted for your password)
and reboot the computer
post back

Access denied security policy file

All i a simple client which is trying to talk to a remote EJB. When i try and startup the client i get the following error.
java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.policy write)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
     at java.security.AccessController.checkPermission(AccessController.java:427)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
     at java.lang.System.setProperty(System.java:699)
     at com.db.abmonitor.client.Client.example(Client.java:51)And i am calling it like
System.setProperty("java.security.policy", "client.policy");
       if (System.getSecurityManager() == null)
       System.setSecurityManager(new RMISecurityManager()); And i have defined a client.policy file in the src directory of the project under eclipse, with the following entries
grant {
     permission java.security.AllPermission;
};Anyone got any ideas ?

Ah RMI headaches...
here is what i blogged for my own self when i was starting with the RMI security stuff:
Since i havent figured out how to do SecurityManager stuff properly, i can override 2 checkPermission methods in SecurityManager with empty method bodies, thats a quick and dirty fix.
- Alternativly, you can set your policy file located in /lib/security/java.policy to: http://java.sun.com/docs/books/tutorial/rmi/example-1dot2/java.policy
- or pass the property to the policy location: -Djava.security.policy=./policy.all
maybe that will help...
i think that maybe your policy file isnt being found where it should be

ISE Network Access Security Policy Document - High/Low

Has anybody created the High and Low level designs for the NASP?
This is my first time and its always easier to have a template to work off of than to reinvent the wheel. An incomplete example is displayed below but I was hoping someone had a complete one of high and low.
Employee Authorization Rule
Table of Contents for Employee Security Policy:
I. Members pg. xxx
II. Acceptable Use Policy pg. xxx
III. Windows 7 Security Requirements pg. xxx
1. Approved AV Installed & Up-to-date pg. xxx
a. Security checks pg. xxx
b. Security rules pg. xxx
IV. Network Access Permissions pg. xxx
1. VLAN Segmentation pg. xxx
a. Noncompliant Posture VLAN pg. xxx
b. Access VLAN Name/ID pg. xxx
2. Access Control List pg. xxx
3. SmartPort Macro pg. xxx
4. Security Group Tag number pg. xxx
IV. Network Access Permissions
1. VLAN Segmentation – Yes
a. Noncompliant Posture VLAN = quarantine-vlan/100
b. Access VLAN Name/ID = employees/10
2. Access Control List – Yes
a. Compliant ACL = permit All IP
b. Noncompliant ACL =
5 Permit TCP from any to “AUP web server” equaling 80
Description: Allow anyone to access the acceptable use policy link
64 Cisco ISE for BYOD and Secure Unified Access
10 Permit TCP from any to “Link based remediation resources” equaling 80 & 443
Description: Allow web traffic to the appropriate remediation resources
20 Permit TCP from any to “file based remediation” equaling 80 & 443
Description: Allow web traffic to the cam for remediation file distribution
30 Permit UDP from any to “dmz DNS Server” equaling DNS
Description: Allow DNS only to the dmz dns server
40 Deny IP from any to any
Description: Block everything else
3. SmartPort Macro – no
4. Security Group Tag number – 10

You can download Cisco ISE High Level design document template from the following link
ATP Partner Resource Center
http://www.ciscosecurityatp.com/login.asp?strReturn=/index.asp

How to specify the security policy "Allow access to everyone" for security role in Deployment descriptor

Hi,
I am migrating a web application from Websphere to Weblogic. The web application has a security role defined in web.xml (Use LDAP for authentication).
security-role>
 <description>Authenticated</description>
 <role-name>Authenticated</role-name>
 </security-role>
This role is mapped to a special subject "All authenticated user in appliation realm" in WAS.
In weblogic, I have the following setting in weblogic.xml
<wls:security-role-assignment>
 <wls:role-name>Authenticated</wls:role-name>
 <wls:externally-defined />
 </wls:security-role-assignment>
And after deploy the application, have to manually add a security role and add the security policy "Allow access to everyone" to this role.
I am wondering if this setting can be specified in for example weblogic.xml so just deploy web applicaiton using deployment descriptor, and I don't need write script to do that .
Thanks

Hi,
You need to have Back End support to achieve this. In Back End you need to create two groups . You need to know what joins has to be made for which group (which is more important) and also make session variable for the userrole (with SQL supporting it). In the BMM layer, we need to put the security join conditions in the 'where clause'.
And make a common report. User loggin in with the respective userid will have userrole and joins assigned in the Back end. And they will be viewing the report according to their access.
Hope this will solve your problem.
Regards
MuRam

JVM (from C++) won't recognize security policy

I can't get the JVM to recognize a security policy file when the JVM is invoked from C++.
Using the Invocation API of JNI from C++ (in W2K) I am creating a Java object which then sets
an RMISecurityManager. I am passing the location of my security policy file in the JavaVMOption
array :
options[opidx++].optionString = "-Djava.security.policy=\"d:\\jini1_1\\policy\\policy.all\"";
The JVM starts fine, and the object gets instantiated, but once the RMISecurityManager is set,
the code no longer has permission to open files or sockets, etc etc. This would indicate that the security policy is not allowing permissions - but the policy file actually has the following:
permission java.security.AllPermission "", "";
(This "promiscuous" policy is just for testing.)
My problem seems to be that in spite of the explicit security policy being passed to the JVM, it is being ignored. This only happens if the code is run from the C++ program. Using the same code and same command line argument for the policy file, everything works fine if it is run as a Java program separately.
What is the special incantation required to get the JVM to recognize a security policy file when it is invoked using the JNI Invocation API?
Thanks

Fixed!
The problem was the additional, inner set of quotes, which were cut and pasted from the batch file used to call the Java program from the command line.

Can JVM security policy be modified to access field values of private field

Similar Messages

Maybe you are looking for