users@glassfish.java.net

Client not authorized for this invocation

From: <glassfish_at_javadesktop.org>
Date: Tue, 03 Mar 2009 04:38:16 PST

Hi all,

we have a maven project with 2 seperated ejb-modules.
I have written a @Stateless session-bean from ejb-module A, which calls an EJB from ejb-module B. The function of the @Stateless session bean is to login the user at the application.
The deployment works fine. But if the user wants to log in, it leads to the following exception:

[#|2009-03-02T10:52:49.562+0100|SEVERE|sun-appserver2.1|javax.enterprise.system.core.security|_ThreadID=15;_ThreadName=httpSSLWorkerThread-8080-1;_RequestID=e6d2229f-7f42-4ccd-b57e-e0a2d777d5a0;|JACC: Unexpected exception on access decision
java.lang.NullPointerExceptionnull
at java.io.Win32FileSystem.normalize(Win32FileSystem.java:164)null
at java.io.Win32FileSystem.getUserPath(Win32FileSystem.java:296)null
at java.io.Win32FileSystem.resolve(Win32FileSystem.java:314)null
at java.io.File.getCanonicalPath(File.java:559)null
at com.sun.enterprise.security.provider.PolicyFile.canonPath(PolicyFile.java:1860)null
at com.sun.enterprise.security.provider.PolicyFile.canonicalizeCodebase(PolicyFile.java:1826)null
at com.sun.enterprise.security.provider.PolicyFile.access$700(PolicyFile.java:296)null
at com.sun.enterprise.security.provider.PolicyFile$5.run(PolicyFile.java:1253)null
at com.sun.enterprise.security.provider.PolicyFile$5.run(PolicyFile.java:1252)null
at java.security.AccessController.doPrivileged(Native Method)null
at com.sun.enterprise.security.provider.PolicyFile.getPermissions(PolicyFile.java:1250)null
at com.sun.enterprise.security.provider.PolicyFile.getPermissions(PolicyFile.java:1198)null
at com.sun.enterprise.security.provider.PolicyFile.implies(PolicyFile.java:1153)null
at com.sun.enterprise.security.provider.BasePolicyWrapper.doImplies(BasePolicyWrapper.java:383)null
at com.sun.enterprise.security.provider.BasePolicyWrapper.implies(BasePolicyWrapper.java:243)null
at com.sun.enterprise.security.application.EJBSecurityManager.authorize(EJBSecurityManager.java:679)null
at com.sun.ejb.containers.BaseContainer.authorize(BaseContainer.java:1549)null
at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1217)null
at com.sun.ejb.containers.EJBObjectInvocationHandler.invoke(EJBObjectInvocationHandler.java:202)null
at com.sun.ejb.containers.EJBObjectInvocationHandlerDelegate.invoke(EJBObjectInvocationHandlerDelegate.java:117)null
at $Proxy132.login(Unknown Source)null at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.privateInvoke(StubInvocationHandlerImpl.java:233)null
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.invoke(StubInvocationHandlerImpl.java:152)null
at com.sun.corba.ee.impl.presentation.rmi.bcel.BCELStubBase.invoke(BCELStubBase.java:225)null
at package.of.the.second.ejb.jar.AuthenticationSystem.java.login(package.of.the.second.ejb.jar.AuthenticationSystem_DynamicStub.java)null
at package.of.the.first.ejb.AuthenticatorBean.login(AuthenticatorBean.java:104)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at com.sun.enterprise.security.application.EJBSecurityManager.runMethod(EJBSecurityManager.java:1011)null
at com.sun.enterprise.security.SecurityUtil.invoke(SecurityUtil.java:175)null
at com.sun.ejb.containers.BaseContainer.invokeBeanMethod(BaseContainer.java:4030)null
at com.sun.ejb.containers.interceptors.AroundInvokeChainImpl.invokeNext(InterceptorManager.java:483)null
at com.sun.ejb.Invocation.proceed(Invocation.java:498)null
at org.jboss.seam.intercept.EJBInvocationContext.proceed(EJBInvocationContext.java:44)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56)null
at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:77)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.persistence.EntityManagerProxyInterceptor.aroundInvoke(EntityManagerProxyInterceptor.java:29)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.persistence.HibernateSessionProxyInterceptor.aroundInvoke(HibernateSessionProxyInterceptor.java:31)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107)null
at org.jboss.seam.intercept.SessionBeanInterceptor.aroundInvoke(SessionBeanInterceptor.java:50)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at com.sun.ejb.containers.interceptors.AroundInvokeInterceptor.intercept(InterceptorManager.java:579)null
at com.sun.ejb.containers.interceptors.AroundInvokeChainImpl.invokeNext(InterceptorManager.java:483)null
at com.sun.ejb.containers.interceptors.InterceptorManager.intercept(InterceptorManager.java:205)null
at com.sun.ejb.containers.BaseContainer.intercept(BaseContainer.java:4003)null
at com.sun.ejb.containers.EJBLocalObjectInvocationHandler.invoke(EJBLocalObjectInvocationHandler.java:197)null
at com.sun.ejb.containers.EJBLocalObjectInvocationHandlerDelegate.invoke(EJBLocalObjectInvocationHandlerDelegate.java:127)null
at $Proxy140.login(Unknown Source)null at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null at org.jboss.seam.util.Reflections.invoke(Reflections.java:22)null
at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:31)null
at org.jboss.seam.intercept.ClientSideInterceptor$1.proceed(ClientSideInterceptor.java:76)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56)null
at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107)null
at org.jboss.seam.intercept.ClientSideInterceptor.invoke(ClientSideInterceptor.java:54)null
at org.javassist.tmp.java.lang.Object_$$_javassist_3.login(Object_$$_javassist_3.java)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:329)null
at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:342)null
at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58)null
at org.jboss.el.parser.AstValue.invoke(AstValue.java:96)null
at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276)null
at org.jboss.seam.core.Expressions$2.invoke(Expressions.java:175)null
at org.jboss.seam.security.jaas.SeamLoginModule.login(SeamLoginModule.java:109)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)null
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)null
at javax.security.auth.login.LoginContext$5.run(LoginContext.java:706)null
at java.security.AccessController.doPrivileged(Native Method)null
at javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703)null
at javax.security.auth.login.LoginContext.login(LoginContext.java:575)null
at org.jboss.seam.security.Identity.authenticate(Identity.java:344)null
at org.jboss.seam.security.Identity.authenticate(Identity.java:332)null
at org.jboss.seam.security.Identity.login(Identity.java:259)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null
at org.jboss.seam.util.Reflections.invoke(Reflections.java:22)null
at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:31)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56)null
at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.core.SynchronizationInterceptor.aroundInvoke(SynchronizationInterceptor.java:32)null
at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68)null
at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107)null
at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:185)null
at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:103)null
at com.gfi.rfo.session.berecht.RfoIdentity_$$_javassist_0.login(RfoIdentity_$$_javassist_0.java)null
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)null
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)null
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)null
at java.lang.reflect.Method.invoke(Method.java:597)null at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:329)null
at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:342)null
at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58)null
at org.jboss.el.parser.AstValue.invoke(AstValue.java:96)null
at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276)null
at com.sun.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:68)null
at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:77)null
at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:91)null
at javax.faces.component.UICommand.broadcast(UICommand.java:383)null
at org.ajax4jsf.component.AjaxViewRoot.processEvents(AjaxViewRoot.java:321)null
at org.ajax4jsf.component.AjaxViewRoot.broadcastEvents(AjaxViewRoot.java:296)null
at org.ajax4jsf.component.AjaxViewRoot.processPhase(AjaxViewRoot.java:253)null
at org.ajax4jsf.component.AjaxViewRoot.processApplication(AjaxViewRoot.java:466)null
at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:97)null
at com.sun.faces.lifecycle.LifecycleImpl.phase(LifecycleImpl.java:251)null
at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:117)null
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:244)null
at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:427)null
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:333)null
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:83)null
at org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:90)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.ajax4jsf.webapp.BaseXMLFilter.doXmlFilter(BaseXMLFilter.java:177)null
at org.ajax4jsf.webapp.BaseFilter.handleRequest(BaseFilter.java:267)null
at org.ajax4jsf.webapp.BaseFilter.processUploadsAndHandleRequest(BaseFilter.java:380)null
at org.ajax4jsf.webapp.BaseFilter.doFilter(BaseFilter.java:507)null
at org.jboss.seam.web.Ajax4jsfFilter.doFilter(Ajax4jsfFilter.java:56)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:58)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.web.HotDeployFilter.doFilter(HotDeployFilter.java:53)null
at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69)null
at org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158)null
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:246)null
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:214)null
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:313)null
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:287)null
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:218)null
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:648)null
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:593)null

I suggested, that the server.policy forbits the call of the EJB in the ejb-module B. Therefore I've changed it with no effect:

grant {
  permission java.security.AllPermission;
};

Thats all of the server.policy.

Do you have any idea, what should I do to fix this problem?

Regards
Fenixx
[Message sent by forum member 'fenixx' (fenixx)]

http://forums.java.net/jive/thread.jspa?messageID=334764