Java.util.PropertyPermission...not granted to ProtectionDomain(Stored Proc)

Question

I'm trying to develop a java stored procedure on Oracle 10.1.2 that makes use of many other libraries, (Axis, WSIF, custom libs), and I'm stuck on this permissions error. I've loaded all of the libs into the same schema under the same user, (with JAVA_ADMIN), and several other privileges. I loaded the files using the following command, "loadjava -verbose -debug -recursivejars -genmissing -resolve -time -fileout loadJava.log -user {userID}/{pwd}@{SID} someJar.jar". The error occurs when a call to WSIFProperties.getProperty attempts to access the org.apache.wsif.mapper or org.apache.wsif.mappingconvention properties.
In a normal java2 environment, I'd simply edit the java.policy file to provide permissions to the codebase (file:/C:/spi4j2.5.4_J2ee1.4/coreLib/fsgWsif1.1.jar). Since Oracle doesn't have ProtectionDomains, if I add read permissions for those properties using the following command, "call dbms_java.grant_permission( 'SCHEMANAME', 'SYS:java.util.PropertyPermission', 'org.apache.wsif.mapper', 'read' )", it seems as if all of the other classes in the schema should be able to read the property, right? It appears the logfile dump below is showing the permissions that the classloader recognizes. Where did he get those? If they came from the DBA_JAVA_POLICY view, then why can't it pick up on the fact that I've granted read permission to the property it's trying to read? When I tried loading the classes without using the -recursivejars option, I got all kinds of ClassDefNotFound errors and couldn't even start the program, (I guess because it'd loaded the other jars as resources instead of unpacking the classes, the resolver couldn't look into the jars and locate the classes that it needed). The program works just fine outside of the database, (even without me adding read permissions for the codebase to access the properties in the java.policy file). Any help would be greatly appreciated. Thanks in advance.
Error shown below:
[2008-03-20 18:23:18.144] [DEBUG] [Root Thread] [org.apache.wsif.*][org.apache.wsif.logging.Trc] [traceIt] [Trc.java:1308] EVENT WSIFMapperFactory.newMapper Caught and handled throwable: java.security.AccessControlException: the Permission (java.util.PropertyPermission org.apache.wsif.mapper read) has not been granted to ProtectionDomain (file:/C:/spi4j2.5.4_J2ee1.4/coreLib/fsgWsif1.1.jar <no certificates>)
com.fds.classloader.ParentLastUrlClassLoader@e87f10c1
<no principals>
java.security.Permissions@c5dd7492 (
(java.io.FilePermission \C:\spi4j2.5.4_J2ee1.4\coreLib\fsgWsif1.1.jar read)
(java.net.SocketPermission localhost:1024- listen,resolve)
(java.util.PropertyPermission java.version read)
(java.util.PropertyPermission java.vm.name read)
(java.util.PropertyPermission java.vm.vendor read)
(java.util.PropertyPermission os.name read)
(java.util.PropertyPermission java.vendor.url read)
(java.util.PropertyPermission java.vm.specification.vendor read)
(java.util.PropertyPermission java.specification.vendor read)
(java.util.PropertyPermission os.version read)
(java.util.PropertyPermission java.specification.name read)
(java.util.PropertyPermission java.class.version read)
(java.util.PropertyPermission file.separator read)
(java.util.PropertyPermission java.vm.version read)
(java.util.PropertyPermission os.arch read)
(java.util.PropertyPermission java.vm.specification.name read)
(java.util.PropertyPermission java.vm.specification.version read)
(java.util.PropertyPermission java.specification.version read)
(java.util.PropertyPermission java.vendor read)
(java.util.PropertyPermission path.separator read)
(java.util.PropertyPermission line.separator read)
)

Answer 1

hi rzander,
I am in a situation similar to your :
{color:#ff0000}Caused by: java.security.AccessControlException: the Permission (java.io.FilePermission /home/neogeo/Java_Resources.jrxml read) has not been granted to ProtectionDomain (file:/home/neogeo/lib/jasperreports-3.0.0.jar &lt;no signer certificates&gt;)
AppClassLoader: file:/home/neogeo/lib/xml-apis.jar file:/home/neogeo/lib/jpa.jar file:/home/neogeo/lib/jdt-compiler-3.1.1.jar file:/home/neogeo/lib/png-encoder-1.5.jar file:/home/neogeo/lib/ant-1.5.1.jar file:/home/neogeo/lib/jaxen-1.1.1.jar file:/home/neogeo/lib/mondrian-2.3.2.8944.jar file:/home/neogeo/lib/commons-javaflow-20060411.jar file:/home/neogeo/lib/batik-bridge.jar file:/home/neogeo/lib/antlr-2.7.5.jar file:/home/neogeo/lib/batik-parser.jar file:/home/neogeo/lib/hibernate3.jar file:/home/neogeo/lib/batik-ext.jar file:/home/neogeo/lib/commons-logging-1.0.2.jar file:/home/neogeo/lib/jasperreports-3.0.0.jar file:/home/neogeo/lib/batik-svggen.jar file:/home/neogeo/lib/batik-xml.jar file:/home/neogeo/lib/xml-apis-ext.jar file:/home/neogeo/lib/batik-dom.jar file:/home/neogeo/lib/jakarta-bcel-20050813.jar file:/home/neogeo/lib/servlet.jar file:/home/neogeo/lib/hsqldb-1.7.1.jar file:/home/neogeo/lib/batik-gvt.jar file:/home/neogeo/lib/batik-svg-dom.jar file:/home/neogeo/lib/jxl-2.6.jar file:/home/neogeo/lib/groovy-all-1.5.5.jar file:/home/neogeo/lib/xercesImpl.jar file:/home/neogeo/lib/batik-awt-util.jar file:/home/neogeo/lib/bsh-2.0b4.jar file:/home/neogeo/lib/commons-digester-1.7.jar file:/home/neogeo/lib/batik-css.jar file:/home/neogeo/lib/commons-logging-api-1.0.2.jar file:/home/neogeo/lib/jfreechart-1.0.0.jar file:/home/neogeo/lib/itext-1.3.1.jar file:/home/neogeo/lib/poi-3.0.1-FINAL-20070705.jar file:/home/neogeo/lib/batik-util.jar file:/home/neogeo/lib/commons-beanutils-1.7.jar file:/home/neogeo/lib/jcommon-1.0.0.jar file:/home/neogeo/lib/saaj-api-1.3.jar file:/home/neogeo/lib/batik-script.jar file:/home/neogeo/lib/xalan.jar file:/home/neogeo/lib/batik-anim.jar file:/home/neogeo/lib/commons-collections-2.1.jar
&lt;no principals&gt;
java.security.Permissions@1aebb385 (
(java.io.FilePermission /home/neogeo/lib/jasperreports-3.0.0.jar read)
(java.util.PropertyPermission user.language write)
(java.util.PropertyPermission * read)
(java.lang.RuntimePermission modifyThreadGroup)
(java.lang.RuntimePermission createSecurityManager)
(java.lang.RuntimePermission modifyThread)
(java.lang.RuntimePermission preferences)
(java.lang.RuntimePermission exitVM)
(oracle.aurora.security.JServerPermission LoadClassInPackage.*)
{color}
{color:#ff0000}
at java.security.AccessControlContext.checkPermission(AccessControlContext.java)
at java.security.AccessController.checkPermission(AccessController.java)
at java.lang.SecurityManager.checkPermission(SecurityManager.java)
at oracle.aurora.rdbms.SecurityManagerImpl.checkPermission(SecurityManagerImpl.java)
at java.lang.SecurityManager.checkRead(SecurityManager.java)
at java.io.FileInputStream.&lt;init&gt;(FileInputStream.java)
at net.sf.jasperreports.engine.xml.JRXmlLoader.load(JRXmlLoader.java:167)
at net.sf.jasperreports.engine.xml.JRXmlLoader.load(JRXmlLoader.java:152)
at net.sf.jasperreports.engine.JasperCompileManager.compileReport(JasperCompileManager.java:150)
... 9 more{color}
I followed your help creating the file  "ORACLE_HOME/javavm/lib/security / java.policy", but I still get the same exception.
Please, can you post the contents of your java.policy to understand how  you set the permissions ?
Edited by: NeOGeO on 11-nov-2008 6.43