How to enable secutiry manager for embedded RHDM/BRMS application

Solution Unverified - Updated -

Issue

  • I get the following error when I run embedded BRMS application on EAP 7
12:15:18,610 ERROR [org.jboss.as.ejb3.invocation] (Thread-0 (ActiveMQ-client-global-threads)) WFLYEJB0034: EJB Invocation failed on component FireDroolsQueueMDB for method public void redhat.cee.sd.aps.mdb.FireDroolsMDB.onMessage(javax.jms.Message): javax.ejb.EJBTransactionRolledbackException: Exception executing consequence for rule "accountBalanceAtLeast" in redhat.cee.sd.aps: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
    at org.jboss.as.ejb3.tx.CMTTxInterceptor.handleInCallerTx(CMTTxInterceptor.java:160)
    ...
    at redhat.cee.sd.aps.mdb.FireDroolsMDB$$$view1.onMessage(Unknown Source)
    ...
Caused by: Exception executing consequence for rule "accountBalanceAtLeast" in redhat.cee.sd.aps: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
    at org.drools.core.runtime.rule.impl.DefaultConsequenceExceptionHandler.handleException(DefaultConsequenceExceptionHandler.java:39)
    at org.drools.core.common.DefaultAgenda.fireActivation(DefaultAgenda.java:1065)
    at org.drools.core.phreak.RuleExecutor.fire(RuleExecutor.java:121)
    at org.drools.core.phreak.RuleExecutor.evaluateNetworkAndFire(RuleExecutor.java:74)
    at org.drools.core.common.DefaultAgenda.fireNextItem(DefaultAgenda.java:972)
    at org.drools.core.common.DefaultAgenda.fireLoop(DefaultAgenda.java:1315)
    at org.drools.core.common.DefaultAgenda.fireAllRules(DefaultAgenda.java:1254)
    at org.drools.core.impl.StatefulKnowledgeSessionImpl.internalFireAllRules(StatefulKnowledgeSessionImpl.java:1372)
    at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1363)
    at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1344)
    at redhat.cee.sd.aps.mdb.FireDroolsMDB.onMessage(FireDroolsMDB.java:65)
    ...
    ... 49 more
Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
    at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:278)
    at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
    at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1525)
    at java.lang.ClassLoader.getParent(ClassLoader.java:1371)
    at org.drools.core.rule.JavaDialectRuntimeData$PackageClassLoader.loadClass(JavaDialectRuntimeData.java:645)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
    at redhat.cee.sd.aps.Rule_accountBalanceAtLeast1993095417DefaultConsequenceInvoker.evaluate(Unknown Source)
    at org.drools.core.definitions.rule.impl.RuleImpl$SafeConsequence$1.run(RuleImpl.java:940)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.drools.core.definitions.rule.impl.RuleImpl$SafeConsequence.evaluate(RuleImpl.java:937)
    at org.drools.core.common.DefaultAgenda.fireActivation(DefaultAgenda.java:1054)
    ... 76 more

Environment

  • Red Hat JBoss BRMS
    • 6.3
    • 6.4
  • Red Hat JBoss Enterprise Application Platform (EAP)
    • 7.1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content