PACL - As a developer I would like reasonable java operations such as classloading, reflection, native library access within libraries I include to not prevent me from developing plugins for the marketplace
Description
Environment
relates
Activity

Tomas June 3, 2013 at 5:04 AM
Categorizing into security epic

Justin Choi April 23, 2013 at 5:28 PMEdited
PASSED Manual Testing using the following steps:
I. Deploying plugins built from Plugins SDK.
Case 1: Zoe Health Care Theme
1. In the liferay-plugins-package file, make sure the property security-manager-enabled= is set to true.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Deploy Zoe Health Care dependencies: 1-3-1 layout, resource-importer-web, web-form-portlet, zoe-healthcare-theme.
4. Create a site from the Zoe Healthcare Site Template.
5. Verify that the site is created and that the site can be modified.
6. Add a user.
7. Sign in as the new user and verify each plugin and site display.
II. Deploying plugins downloaded from Marketplace.
Case 2: Kaleo & Kaleo Forms
1. In the liferay-plugins-package file, make sure the property security-manager-enabled= is set to true.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Go to the MP site and download the Kaleo and Kaleo Forms plugins.
4. Install the plugins.
5. Go to > Control Panel > Plugins Security Manager
6. Verify that the plugins are available on the Control Panel and Portal.
III. Generate a new policy
Case 3: Youtube
1. In the liferay-plugins-package file for Youtube-portlet, set the property security-manager-enabled= is set to generate.
2. Deploy PACL dependencies: chat, flash, sample-service-builder, and test-pacl.
3. Verify the portlet deploys.
IV: Portlets on the Portal:
1. Deploy PACL dependencies.
2. Add Asset Publisher to the page.
3. Add the Calendar portlet to the page.
4. Using the asset publisher, add content.
5. Using the calendar portlet, add several events - stand alone, all day, repeating events, etc.
Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: 83bd5bbef891721ae6731eec04be85c1fdda22ea. Plugins 6.1.x EE GIT ID: d054c7d96b7c4b3d5c61bb45062175e10e4adda5.
Tomcat 7.0 + MySQL 5. JDK7. Portal 6.2.x GIT ID: 92ef0b20a4cac103e36ead81f954665b1a6668d0. Plugins 6.2.x GIT ID: e10ff02e4775d30760513327186c90fcd86f78f5.

Raymond Augé April 7, 2013 at 8:07 AM
Pending the last couple of reviews by Brian, this work is complete.
Details
Details
Assignee

Reporter

Epic/Theme
Components
Fix versions
Affects versions
Priority
Zendesk Support
Linked Tickets
Zendesk Support

There are a great number of issues currently in developing plugins for the marketplace (which require PACL to be enabled).
One only needs to browse http://www.liferay.com/community/forums/-/message_boards/category/10919228 to find multiple issues, mostly related to perfectly normal and acceptable java operations.