Granting SecurityPermissions to extension

Elastic Stack Elasticsearch
1

Hi

I try to develop an x-pack extension which, as it seems, requires SecurityPermission to insertProvider.BC.
So i put this in my x-pack-extension-security.policy:

grant {
  permission java.security.SecurityPermission "insertProvider.BC";
};

This is being picked up by the x-pack/extension install script, showing that it needs to grant these permissions.

However, when I start elasticsearch i'm still getting the following:

java.security.AccessControlException: access denied ("java.security.SecurityPermission" "insertProvider.BC")

Am I doing something wrong or has this been disabled for security reasons?

2

You need to wrap your code requiring the permission inside a doPrivileged block. Have you read the plugin author help page?

3

Thought I did that, or the check for permission did already fail.
Nevermind it's working now.