Uploaded image for project: 'PUBLIC - Liferay Portal Enterprise Edition'
  1. PUBLIC - Liferay Portal Enterprise Edition
  2. LPE-8918

Implement PACL security manager

    XMLWordPrintable

Details

    Description

      Implement PACL security manager to ensure secure transactions on the Marketplace.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LPS-38601 PACL - PortalDelegateServlet does not work when PACL is enabled

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-31181 Service-Builder classes it not working with PACL enabled

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-28370 PACL - Errors during invocation of servlets wrapped by PortalClassLoaderServlet

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-28371 PACL - Failure during plugin startup if it's not exploded (if it's still a zip file)

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-30766 PACL, issue with SecurityManager

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-31182 Search Container is not working for service-builder generated entries with PACL enabled

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-32137 PACL- java.lang.SecurityException: Attempted to get environment name *

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-32235 As a Marketplace Developer, I would like to specify PACL policies for allowed socket connections using wildcards, so that my app can deploy to unknown environments successfully

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-34711 PACL does not allow launching java from a plugin

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-34863 PACL AccessControlException with Mojarra JSF portlets with @PostConstruct annotated managed-bean methods

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-25725 Executing "Clean Up Permissions" twice removes Add to Page permissions for User role

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-28210 PACL: Deploying test-pacl-portlet does not allow adding of blog entries

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-29397 PACL causes exceptions when upgrading to GA2

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-32623 PACL incompatibility with MacOS X JDK

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-34609 PACL - Permission implementations need to follow the 0, 1, or 2 rule for Constructors

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-34664 PACL - As a plugin developer I would like to see DEBUG logging enabled for GeneratingPACLPolicy by default

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-34689 PACL causes ExpandoBridgeImpl's equals comparison to fail

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-36198 SQLChecker fails to parse valid SQL on Hypersonic

          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. LPS-33047 PACL - As a developer I would like reasonable java operations such as classloading, reflection, native library access within libraries I include to not prevent me from developing plugins for the marketplace

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. LPS-28281 PACL utilities should use ProxyUtil rather than Proxy for better concurrency

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33296 PACL - Refactor PortalSecurityManager into an injectable resource

          • Major - Major loss of function.
          • Closed

          Technical Task - A technical task. LPS-33009 PACL - Read and track state by enum

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33010 PACL - Expose methods to get specific checkers

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33011 PACL - Rule generation API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33018 PACL - Implement the rule generation API

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33020 PACL - Generating policy implementation

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33058 PACL - Rename PACLClassLoaderUtil to ClassLoaderUtil to begin uncluttering the portal of PACL naming

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33286 PACL - java.security.Policy based PACL implementation (a.k.a. PACLv2)

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33292 PACL - Centralize initialization of PACL into a private SecurityManagerUtil class

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33293 PACL - Use new SecurityManagerUtil and initialize as early as possible

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33298 PACL- Initialize the new java.security.Policy

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33324 PACL - Convert to boolean implies API method to match j.s.Policy

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33329 PACL - Implement a bean post processor which will process @DoPrivileged annotations

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33330 PACL - It's nessecary to initialize the portal security manager impl from the beginning in all cases

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33331 PACL - private interfaces to support proxies

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33334 PACL - Apply interfaces everywhere a cast to the impl exists

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33351 PACL - Private interface so that core code can unwrap privileged beans if needed

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33358 PACL - Move PACL specific classes into the pacl package

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33367 PACL - Algorithm for handling permission checks on accessibility changes in local code

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33368 PACL - AWTPermission support (richfaces uses AWT for image processing)

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33585 PACL - Document environment variable security property

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33587 PACL - deprecate PACLBeanHandler

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33589 PACL - deprecate BaseReflectChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33592 PACL - deprecate PACLTemplateWrapper

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33594 PACL - deprecate PACLAdvice

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33596 PACL - deprecate PACLClassUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33608 PACL - rename inner PACLPortalLifecycle class

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33609 PACL - eliminate most occurences of PortalSecurityManagerThreadLocal

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33610 PACL - centralize and localize HookHotDeployListener security checks

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33657 PACL - remove uses of CheckerUtil.isAccessControllerDoPrivileged()

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33658 PACL - add method to get the policy on PortalSecurityManager interface

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33661 PACL - remove unused PACLPolicy.hasPortalService method

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33663 PACL - add missing getter to LogFactoryUtil - needed for pacl security

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33665 PACL - remove hard coded classnames from RuntimeChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33679 PACL - unwrap HttpImpl if it's wrapped by DoPrivilegedBean

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33685 PACL - prevent a circularity error in CentralizedThreadLocal

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33689 PACL - add missing permission checks to ExpandoBridgeFactoryUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33691 PACL - centralize getClassLoader permission check, make sure it doesn't break any native JVM checks

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33692 PACL - remove unused interface from InfrastructureUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33696 PACL - add missing socket permission checks to HttpUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33697 PACL - add missing permission checks to FileUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33699 PACL - prevent FileAvailabilityUtil from causing an unnecessary FilePermission check

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33700 PACL - centralize PortalMessageBusPermission checking

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33701 PACL - centralize ThreadPoolExecutor checking

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33702 PACL - centralize DynamicQuery check

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33703 PACL - centralize the Service checks

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33704 PACL - implement security checks for PortletBagPool

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33717 PACL - implement cross-plugin security checks for BeanLocator

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33722 PACL - centralize PortalHookPermission checking

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33724 PACL - remove unused code from SecurityManagerUtil

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33725 PACL - remove remaining uses of PortalSecurityManagerThreadLocal in favour of access controllers

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33726 PACL - fast way to get the current PACLPolicy

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33729 PACL - ensure accessibility checks still work on public members

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33748 PACL - method of detecting privileged callers

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33750 PACL - method to account for differences between JVM implementations

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33751 PACL - method for deep Liferay bean class detection

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33769 PACL - method to dynamically wrap objects with a privileged handler

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33779 PACL - register trusted protection domains as early as possible

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33782 PACL - implement trusted caller support for SecurityChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33784 PACL - implement trusted caller support for RuntimeChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33786 PACL - implement trusted caller support for ReflectChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33787 PACL - implement trusted caller support for PortalServiceChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33789 PACL - implement trusted caller support for NetChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33815 PACL - improve the performance of DoPrivilegedHandler

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33820 PACL - update the FileChecker with improved logic

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33823 PACL - implement trusted caller support for PortalRuntimeChecker

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33826 PACL - separate context classloader swaping from the PACL logic in DirectRequestDispatcherFactoryImpl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33863 PACL - fix a small regression with the JSP compiler

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33864 PACL - fallback onto a locally instantiated, locally applicable java.security.Policy

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33866 PACL - fix identification of current JVM version

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33875 PACL - wrap objects with DoPrivileged proxy where appropriate

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33876 PACL - inject pacl into BeanLocatorImpl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33877 PACL - add access controller to PACLRequestDispatcherWrapper

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33879 PACL - inject pacl into DataSourceFactoryImpl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33881 PACL - inject pacl into HotDeployImpl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33882 PACL - inject pacl into DirectRequestDispatcherFactoryImpl

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33884 PACL - inject pacl into PortalFilePermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33885 PACL - inject pacl into PortalHookPermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33886 PACL - inject pacl into PortalMessageBusPermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33887 PACL - the PortalMessageBusPermission only checks send

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33889 PACL - inject pacl into PortalRuntimePermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33890 PACL - inject pacl into PortalServicePermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33891 PACL - inject pacl into PortalSocketPermission

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33893 PACL - inject pacl into PortletApplicationContext

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33894 PACL - inject pacl into ServiceBeanAopProxy

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33898 PACL - util-taglib should not be changing context classLoader

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33899 PACL - auto proxy finder and persistence when PACL is enabled

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33900 PACL - allow service builder plugins to unregister their MBeans

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33904 PACL - create a test suite for testing PACL

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33906 PACL - SQL tests

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33932 PACL - when calling the portal's BeanLocator the servletContextName is null

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33938 PACL - when we create PACLInitialContextFactoryBuilder we block the JVM from performing scheme based JNDI lookups

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33954 PACL - getPackage on a java proxy returns null

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33960 PACL - make sure BeanLocator beans are properly wrapped (avoid wrapping in VelocityBeanHandler when not a velocity bean)

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33961 PACL - prevent deep cascading permission checks on getClassLoader

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33964 PACL - fix BeanLocatorTest to account for the bean being wrapped rather than not returned (so that i behaves like it did originally)

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-33965 PACL - don't wrap the bean if it's the portal asking for it

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-34240 PACL - SQL security checks for indexes

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Technical Task - A technical task. LPS-34724 PACL - move the classes and make the API changes to load from the jar

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          relates

          Bug - A problem which impairs or prevents the functions of the product. LPS-35815 More than one PACL proxies are applied to certain beans

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-35814 Performing the calculation to determine the need to proxy a bean by PACL results in significant performance hit in cases where the result is to NOT proxy

          • Closed

          Bug - A problem which impairs or prevents the functions of the product. LPS-35816 A bean which does not have any interfaces is being proxied by PACL

          • Closed

          Activity

            People

              jonathan.mccann Jonathan McCann
              jonathan.mccann Jonathan McCann
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Packages

                  Version Package
                  6.1 EE GA3 (6.1.30)