-
Type:
Bug
-
Status: Closed
-
Resolution: Won't Fix
-
Affects Version/s: 6.2.0 CE GA1
-
Fix Version/s: 6.2.0 CE GA1
-
Component/s: Web Services
-
Labels:None
-
Environment:Windows 7, Tomcat 7, Java SE 7
Although property tunnel.servlet.hosts.allowed=127.0.0.1,SERVER_IP looks configured correctly, TunnelServlet nevertheless throws exception:
Caused by: java.lang.SecurityException: Access denied for 127.0.0.1
at com.liferay.portal.security.ac.AccessControlAdvisorImpl.checkAllowedHosts(AccessControlAdvisorImpl.java:75)
at com.liferay.portal.security.ac.AccessControlAdvisorImpl.accept(AccessControlAdvisorImpl.java:44)
at com.liferay.portal.security.ac.AccessControlAdvice.before(AccessControlAdvice.java:46)
when accessed from localhost.
In the debugger I can see that this happens in TunnelServlet on line 79:
returnObj = methodHandler.invoke(true);
I've already used this functionality in version 6.1.1 and there it used to work fine.