IV16484: ACCESSCONTROLEXCEPTION IN XLTXE: ACCESS DENIED (JAVA.UTIL.PROPER TYPERM)

APAR status

• Closed as program error.

Error description

• Error Message: <OSB>2/17/12 13:43:33:480 CET<CSB> 0000006b
  SecurityManag W   SECJ0314W: Current Java 2 Security policy
  reported a potential violation of Java 2 Security Permission.
  Refer to the InfoCenter for further information.
  Permission:
        user.dir : Access denied (java.util.PropertyPermission
  user.dir read)
  Code:
  
  com.ibm.xmlns.prod.websphere.bpc_common.types._7.UserDataType_JA
  XB_Serialization_Stub_1  in  {null code URL}
  .
  Stack Trace: java.security.AccessControlException: Access denied
  (java.util.PropertyPermission user.dir read)
          at
  java.security.AccessController.checkPermission(AccessController.
  java:108)
          at
  java.lang.SecurityManager.checkPermission(SecurityManager.java:5
  44)
          at
  com.ibm.ws.security.core.SecurityManager.checkPermission(Securit
  yManager.java:208)
          at
  java.lang.SecurityManager.checkPropertyAccess(SecurityManager.ja
  va:1297)
          at java.lang.System.getProperty(System.java:388)
          at java.lang.System.getProperty(System.java:372)
          at
  org.apache.xml.serializer.dom3.DOM3TreeWalker.<init>(Unknown
  Source)
          at
  org.apache.xml.serializer.dom3.DOM3SerializerImpl.serializeDOM3(
  Unknown Source)
          at
  org.apache.xml.serializer.dom3.LSSerializerImpl.write(Unknown
  Source)
          at
  com.ibm.xml.xlxp2.jaxb.marshal.impl.SerializationContext.writeEl
  ement(SerializationContext.java:1366)
          at
  com.ibm.xmlns.prod.websphere.bpc_common.types._7.UserDataType_JA
  XB_Serialization_Stub_1.write(com.ibm.xmlns.prod.websphere.bpc_c
  ommon.types._7.UserDataType_JAXB_Serialization_Stub_1.java)
          at
  com.ibm.xmlns.prod.websphere.human_task.services._7.ClaimRespons
  e_JAXB_Serialization_Stub.write(com.ibm.xmlns.prod.websphere.hum
  an_task.services._7.ClaimResponse_JAXB_Serialization_Stub.java)
          at
  com.ibm.xml.xlxp2.jaxb.marshal.JAXB_Serialization_Root_Stub.writ
  e(com.ibm.xml.xlxp2.jaxb.marshal.JAXB_Serialization_Root_Stub.ja
  va)
          at
  com.ibm.xml.xlxp2.jaxb.marshal.MarshallerImpl.marshal(Marshaller
  Impl.java:164)
          at
  org.apache.axis2.datasource.jaxb.JAXBDSContext$1.run(JAXBDSConte
  xt.java:492)
          at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:203)
          at
  org.apache.axis2.java.security.AccessController.doPrivileged(Acc
  essController.java:78)
          at
  org.apache.axis2.datasource.jaxb.JAXBDSContext.marshalByElement(
  JAXBDSContext.java:477)
          at
  org.apache.axis2.datasource.jaxb.JAXBDSContext.marshal(JAXBDSCon
  text.java:437)
          at
  org.apache.axis2.jaxws.message.databinding.impl.JAXBBlockImpl._o
  utputFromBO(JAXBBlockImpl.java:189)
          at
  org.apache.axis2.jaxws.message.impl.BlockImpl.outputTo(BlockImpl
  .java:371)
          at
  org.apache.axis2.jaxws.message.impl.BlockImpl.serialize(BlockImp
  l.java:295)
          at
  org.apache.axiom.om.impl.llom.OMSourcedElementImpl.internalSeria
  lize(OMSourcedElementImpl.java:781)
          at
  org.apache.axiom.om.impl.llom.OMElementImpl.internalSerialize(OM
  ElementImpl.java:967)
          at
  org.apache.axiom.soap.impl.llom.SOAPEnvelopeImpl.serializeIntern
  ally(SOAPEnvelopeImpl.java:283)
          at
  org.apache.axiom.soap.impl.llom.SOAPEnvelopeImpl.internalSeriali
  ze(SOAPEnvelopeImpl.java:245)
          at
  org.apache.axiom.om.impl.llom.OMSerializableImpl.serializeAndCon
  sume(OMSerializableImpl.java:207)
          at
  org.apache.axis2.transport.http.SOAPMessageFormatter.writeTo(SOA
  PMessageFormatter.java:74)
          at
  com.ibm.ws.websvcs.transport.http.HTTPTransportSender.sendUsingO
  utputStream(HTTPTransportSender.java:507)
          at
  com.ibm.ws.websvcs.transport.http.HTTPTransportSender.invoke(HTT
  PTransportSender.java:371)
          at
  org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:514)
          at
  org.apache.axis2.jaxws.server.JAXWSMessageReceiver.receive(JAXWS
  MessageReceiver.java:220)
          at
  org.apache.axis2.engine.AxisEngine.receive(AxisEngine.java:198)
          at
  org.apache.axis2.transport.http.HTTPTransportUtils.processHTTPPo
  stRequest(HTTPTransportUtils.java:172)
          at
  com.ibm.ws.websvcs.transport.http.WASAxis2Servlet.doPost(WASAxis
  2Servlet.java:1466)
          at
  javax.servlet.http.HttpServlet.service(HttpServlet.java:595)
          at
  javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
          at
  com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWr
  apper.java:1214)
          at
  com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(Ser
  vletWrapper.java:774)
          at
  com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(Ser
  vletWrapper.java:456)
          at
  com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest
  (ServletWrapperImpl.java:178)
          at
  com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters
  (WebAppFilterManager.java:1027)
          at
  com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleReques
  t(CacheServletWrapper.java:87)
          at
  com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.
  java:895)
          at
  com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContai
  ner.java:1662)
          at
  com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLin
  k.java:195)
          at
  com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscr
  imination(HttpInboundLink.java:452)
          at
  com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRe
  quest(HttpInboundLink.java:511)
          at
  com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequ
  est(HttpInboundLink.java:305)
          at
  com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complet
  e(HttpICLReadCallback.java:83)
          at
  com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureComp
  leted(AioReadCompletionListener.java:165)
          at
  com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyn
  cFuture.java:217)
          at
  com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncC
  hannelFuture.java:161)
          at
  com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java)
          at
  com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
          at
  com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHand
  ler.java:775)
          at
  com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
          at
  com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1659)
  .
  

Local fix

Problem summary

• The problem is caused when security is enabled.
  

Problem conclusion

• This defect will be fixed in:
  6.0.1 SR1 FP1
  6.0.0 SR11
  .
  Change has been made to DOM3TreeWalker to prevent the XL TXE
  fails by throwing AccessControlException.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  XML/XSL

• Fixed component ID

  620700126

Applicable component levels

• R600 PSY

     UP