Since 1.2.0, Spring DM integrates with Java 2 security. Namely Spring DM uses privileged blocks for executing security sensitive operations using its own permissions.
Being a framework, Spring DM needs to introspect bundles to determine their content and configuration. In general, it is recommended to grant
java.security.AllPermission to Spring DM bundles. For those that would like to restrict the properties, below you can find a list
of permissions that are needed for Spring DM to work properly. However, we strongly recommend to test whether the permissions are needed or
not for your environment since the minimum number depends heavily on what parts of the framework are used.
Table B.1. Spring DM Permission Table
| Permission | Target | Action | Usage |
|---|---|---|---|
java.io.FilePermission | depends, <<ALL FILES>> recommended | read/write | Required by the logging system and web extender for installing the wars and JSP taglibs |
java.lang.RuntimePermission | * | accessDeclaredMembers | Used in some cases for reflection (such as accessing the BundleContext from a
given Bundle (on R4.0 platforms). |
java.lang.reflect.ReflectPermission | * | suppressAccessChecks | Used for accessing (through reflection) non-public methods or fields internally. |
java.util.PropertyPermission | * | read,write | In use by the testing framework mainy. Useful for reading the environment, including OSGi properties. |
org.osgi.framework.AdminPermission | * | class, execute, listener, metadata, resolve, resource | Used by the extender to listen read the content of started bundles. |
org.osgi.framework.BundlePermission | * | HOST | Useful when attaching a custom configuration (as fragment) to the extender/web extender. |
org.osgi.framework.PackagePermission | * | EXPORT, IMPORT | Basic permission used for importing and exporting the Spring DM bundles content. |
org.osgi.framework.ServicePermission | * | get,register | Used for publishing and lookup of Spring DM internal services (such as the Spring namespace handlers/resolvers). |
Note that as of Spring DM 2.0, the extender will use the target bundle permissions for all actions executed on its behalf. That is, loading of classes, publishing the services, importing packages or the method invocations are executed using the bundle credentials just as if the user bundle would
As a general recommendation, for security sensible environments, to determine the minimum number of permissions start with a basic set of bundles and no permissions. This way, on each run, one can find out what permissions are needed and by whom and tweak the system accordingly.