PACL - As a developer I would like reasonable java operations such as classloading, reflection, native library access within libraries I include to not prevent me from developing plugins for the marketplace

Description

There are a great number of issues currently in developing plugins for the marketplace (which require PACL to be enabled).

One only needs to browse http://www.liferay.com/community/forums/-/message_boards/category/10919228 to find multiple issues, mostly related to perfectly normal and acceptable java operations.

Environment

Any
100% Done

relates

Activity

Show:

Tomas June 3, 2013 at 5:04 AM

Categorizing into security epic

Justin Choi April 23, 2013 at 5:28 PM
Edited

PASSED Manual Testing using the following steps:

I. Deploying plugins built from Plugins SDK.
Case 1: Zoe Health Care Theme
1. In the liferay-plugins-package file, make sure the property security-manager-enabled= is set to true.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Deploy Zoe Health Care dependencies: 1-3-1 layout, resource-importer-web, web-form-portlet, zoe-healthcare-theme.
4. Create a site from the Zoe Healthcare Site Template.
5. Verify that the site is created and that the site can be modified.
6. Add a user.
7. Sign in as the new user and verify each plugin and site display.

II. Deploying plugins downloaded from Marketplace.
Case 2: Kaleo & Kaleo Forms
1. In the liferay-plugins-package file, make sure the property security-manager-enabled= is set to true.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Go to the MP site and download the Kaleo and Kaleo Forms plugins.
4. Install the plugins.
5. Go to > Control Panel > Plugins Security Manager
6. Verify that the plugins are available on the Control Panel and Portal.

III. Generate a new policy
Case 3: Youtube
1. In the liferay-plugins-package file for Youtube-portlet, set the property security-manager-enabled= is set to generate.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Verify the portlet deploys.

IV: Portlets on the Portal:
1. Deploy PACL dependencies.
2. Add Asset Publisher to the page.
3. Add the Calendar portlet to the page.
4. Using the asset publisher, add content.
5. Using the calendar portlet, add several events - stand alone, all day, repeating events, etc.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: 83bd5bbef891721ae6731eec04be85c1fdda22ea. Plugins 6.1.x EE GIT ID: d054c7d96b7c4b3d5c61bb45062175e10e4adda5.
Tomcat 7.0 + MySQL 5. JDK7. Portal 6.2.x GIT ID: 92ef0b20a4cac103e36ead81f954665b1a6668d0. Plugins 6.2.x GIT ID: e10ff02e4775d30760513327186c90fcd86f78f5.

Raymond Augé April 7, 2013 at 8:07 AM

Pending the last couple of reviews by Brian, this work is complete.

Fixed

Details

Assignee

Reporter

Epic/Theme

Components

Priority

Zendesk Support

Created February 15, 2013 at 4:27 PM
Updated June 26, 2023 at 5:58 AM
Resolved April 24, 2013 at 2:29 PM
Loading...