# Integration Testing for a Custom Plugin - Security Policy Issue

**URL:** <https://discuss.elastic.co/t/integration-testing-for-a-custom-plugin-security-policy-issue/166370>\
**Category:** Elasticsearch\
**Created:** [January 30, 2019, 2:04pm UTC](https://discuss.elastic.co/t/integration-testing-for-a-custom-plugin-security-policy-issue/166370 "2019-01-30T14:04:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Oussema\_Samet](https://avatars.discourse-cdn.com/v4/letter/o/d78d45/32.png) [@Oussema\_Samet](https://discuss.elastic.co/u/Oussema_Samet)\
**Post date:** [January 30, 2019, 2:04pm UTC](https://discuss.elastic.co/t/integration-testing-for-a-custom-plugin-security-policy-issue/166370/1 "2019-01-30T14:04:21Z")

</div>

OS: **Mac OS 10.13.6**  
JDK: **1.8.0\_191**  
Elasticsearch: **6.5.4**  
Dependencies management: **Maven 3.6.0**

I 've developed a Custom ES plugin with custom security policy, so I added the `plugin-security.policy` file wich containing the`grant` statements for my additional permissions:

```auto
grant {
  permission java.lang.RuntimePermission "accessDeclaredMembers";
  permission java.lang.RuntimePermission "getClassLoader";
  permission java.lang.RuntimePermission "setContextClassLoader";
  permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
  permission org.hibernate.validator.HibernateValidatorPermission "accessPrivateMembers";
  permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
};

```

So far, my plugin runs greatly within an Elasticsearch instance.

Now I want to add integrations test for my plugin, so I integrate the elasticsearch-test framework and I loaded the plugin as mentioned here:  
[https://www.elastic.co/guide/en/elasticsearch/reference/6.6/integration-tests.html#changing-node-configuration](https://www.elastic.co/guide/en/elasticsearch/reference/6.6/integration-tests.html#changing-node-configuration),

After following those extra developement steps ([https://github.com/elastic/elasticsearch/blob/master/CONTRIBUTING.md#configuring-ides-and-running-tests](https://github.com/elastic/elasticsearch/blob/master/CONTRIBUTING.md#configuring-ides-and-running-tests)), I'm getting this Exception:

```auto
Caused by: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessDeclaredMembers")
	at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
	at java.security.AccessController.checkPermission(AccessController.java:884)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
	at java.lang.Class.checkMemberAccess(Class.java:2348)

```

So, I guess that my security-policy file which is placed at `src/main/resources/plugin-metadata`, is not loaded at the test stage...  
Can anyone, help me on how I include the security-policy file while testing?  
Thanks,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 27, 2019, 2:04pm UTC](https://discuss.elastic.co/t/integration-testing-for-a-custom-plugin-security-policy-issue/166370/2 "2019-02-27T14:04:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.