-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
Hi Andrew,
You cannot sign your B2s. Well, you can, but it wont help. What the error should say is the B2 "requested a permission that only B2s signed by Bb are allowed to have."
Cheers,
Shane.
-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
Thanks Shane,
I guess it's time to audit my B2s and see if they need the permissions to function and what the alternatives to how I'm using them are (if any).
Which will probably mean moving to using DAO for most things rather than grabbing a Db connection directly.
-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
Hi Andrew Wiles,
I'd love to hear the results of your auditing. It will be good to get a list together of what Blackboard is restricting.
They have announced that the <<ALL FILES>> permission will be going in 2017 Q4.
Cheers,
Shane.
-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
1 of 1 people found this helpfulHi Shane,
The results are in.
There were only two (repeated) permissions that in my manifests which were generating the warnings, these were:
<permission type="java.util.PropertyPermission" name="*" actions="read,write" />
Which I think I've picked up from a Spring B2 tutorial / template somewhere? Learn 3200 seems content with having this left as actions="read".
And,
<permission type="java.lang.RuntimePermission" name="*"/>
Which I must have picked up somewhere for my non-Springy B2s but doesn't affect anything when I remove it.
Panic over!
Cheers,
Andrew
-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
I wonder if perhaps it is the asterisk in the name field that is blocked as of 2017 Q2. Mark Kauffman or Scott Hurrey are you able to provide any light on what permissions are being restricted in which versions (beyond the ALL FILES permission).
Cheers,
Shane.
-
-
-
-
Re: Unsigned B2 <...> requested a permission that only signed B2s are allowed to have
Actually, you can. But it's only practical when you're self-hosted as you need to put the public key (corresponding to the private key that you used for signing) somewhere in the Blackboard configuration directory (config/internal/certs/ ?) and restart Blackboard before uploading your b2. At least, that worked a few years back (unfortunately I didn't document the exact steps taken).
-