How to enable secutiry manager for embedded RHDM/BRMS application
Issue
- I get the following error when I run embedded BRMS application on EAP 7
12:15:18,610 ERROR [org.jboss.as.ejb3.invocation] (Thread-0 (ActiveMQ-client-global-threads)) WFLYEJB0034: EJB Invocation failed on component FireDroolsQueueMDB for method public void redhat.cee.sd.aps.mdb.FireDroolsMDB.onMessage(javax.jms.Message): javax.ejb.EJBTransactionRolledbackException: Exception executing consequence for rule "accountBalanceAtLeast" in redhat.cee.sd.aps: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
at org.jboss.as.ejb3.tx.CMTTxInterceptor.handleInCallerTx(CMTTxInterceptor.java:160)
...
at redhat.cee.sd.aps.mdb.FireDroolsMDB$$$view1.onMessage(Unknown Source)
...
Caused by: Exception executing consequence for rule "accountBalanceAtLeast" in redhat.cee.sd.aps: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
at org.drools.core.runtime.rule.impl.DefaultConsequenceExceptionHandler.handleException(DefaultConsequenceExceptionHandler.java:39)
at org.drools.core.common.DefaultAgenda.fireActivation(DefaultAgenda.java:1065)
at org.drools.core.phreak.RuleExecutor.fire(RuleExecutor.java:121)
at org.drools.core.phreak.RuleExecutor.evaluateNetworkAndFire(RuleExecutor.java:74)
at org.drools.core.common.DefaultAgenda.fireNextItem(DefaultAgenda.java:972)
at org.drools.core.common.DefaultAgenda.fireLoop(DefaultAgenda.java:1315)
at org.drools.core.common.DefaultAgenda.fireAllRules(DefaultAgenda.java:1254)
at org.drools.core.impl.StatefulKnowledgeSessionImpl.internalFireAllRules(StatefulKnowledgeSessionImpl.java:1372)
at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1363)
at org.drools.core.impl.StatefulKnowledgeSessionImpl.fireAllRules(StatefulKnowledgeSessionImpl.java:1344)
at redhat.cee.sd.aps.mdb.FireDroolsMDB.onMessage(FireDroolsMDB.java:65)
...
... 49 more
Caused by: java.security.AccessControlException: WFSM000001: Permission check failed (permission "("java.lang.RuntimePermission" "getClassLoader")" in code source "(null <no signer certificates>)" of "null")
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:278)
at org.wildfly.security.manager.WildFlySecurityManager.checkPermission(WildFlySecurityManager.java:175)
at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1525)
at java.lang.ClassLoader.getParent(ClassLoader.java:1371)
at org.drools.core.rule.JavaDialectRuntimeData$PackageClassLoader.loadClass(JavaDialectRuntimeData.java:645)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
at redhat.cee.sd.aps.Rule_accountBalanceAtLeast1993095417DefaultConsequenceInvoker.evaluate(Unknown Source)
at org.drools.core.definitions.rule.impl.RuleImpl$SafeConsequence$1.run(RuleImpl.java:940)
at java.security.AccessController.doPrivileged(Native Method)
at org.drools.core.definitions.rule.impl.RuleImpl$SafeConsequence.evaluate(RuleImpl.java:937)
at org.drools.core.common.DefaultAgenda.fireActivation(DefaultAgenda.java:1054)
... 76 more
Environment
- Red Hat JBoss BRMS
- 6.3
- 6.4
- Red Hat JBoss Enterprise Application Platform (EAP)
- 7.1
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.