"illegal access to page" error?

Question

Received the following error message:
Tue Oct 10 17:29:58 EDT 2000:<E> <ServletContext-General> Servlet failed with Exception
java.lang.SecurityException: JspServiceManager - illegal access to page: /mailbeanservlet
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Compiled Code)
at java.lang.RuntimeException.<init>(Compiled Code)
at java.lang.SecurityException.<init>(Compiled Code)
at com.beasys.commerce.axiom.jsp.JspServiceManager.service(Compiled Code)
at javax.servlet.http.HttpServlet.service(Compiled Code)
at weblogic.servlet.internal.ServletStubImpl.invokeServlet(Compiled Code)
at weblogic.servlet.internal.ServletContextImpl.invokeServlet(Compiled Code)
at weblogic.servlet.internal.ServletContextImpl.invokeServlet(Compiled Code)
at weblogic.servlet.internal.ServletContextManager.invokeServlet(Compiled Code)
at weblogic.socket.MuxableSocketHTTP.invokeServlet(Compiled Code)
at weblogic.socket.MuxableSocketHTTP.execute(Compiled Code)
at weblogic.kernel.ExecuteThread.run(Compiled Code)
===================
The following lines of code were used to set the action and the destination request parameter:
<form action="<%=getTrafficURI(request)%>" method="POST">
<input type=hidden name="<%=DESTINATION_TAG%>" value="/mailbeanservlet" >
Any clues to this problem, or if additional information is needed, please let me know. Thanks in advance!

Answer 1

Hello Santhana,
The portals do not use
com.beasys.commerce.foundation.flow.jsp.DefaultDestinationDeterminer, which is
not really "webflow" because "webflow" is
com.beasys.commerce.webflow.DestinationDeterminer, as used by the commerce JSP
templates (see the APPLICATION_INIT property sets in the admin tool). The
DefaultDestinationDeterminer will not let you go through the FlowManager
servlet to a JSP page that is not below your portal workindir or repositorydir,
as specified in your APPLICATION_INIT property set. This is for security
reasons.
You can implement your own destination determiner and register it with your
APPLICATION_INIT property set if you need to.
Ture Hoefner
BEA Systems, Inc.
2590 Pearl St.
Suite 110
Boulder, CO 80302
www.bea.com