topic Is Tomcat Security Manager supported? in Alfresco Forum https://connect.hyland.com/t5/alfresco-forum/is-tomcat-security-manager-supported/m-p/28193#M12071 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>A security company has performed security checks on Alfresco and they have noted that Tomcat Security Manager has not been enabled. Can someone confirm whether Alfresco works reliably with Security Manager enabled?</P><P></P><P>We are currently running Alfresco v4.2.5.2 on Red Hat 6.8 (Santiago)</P><P></P><P>Many thanks</P></BODY></HTML> Tue, 28 Mar 2017 08:35:09 GMT ibar78 2017-03-28T08:35:09Z Is Tomcat Security Manager supported? https://connect.hyland.com/t5/alfresco-forum/is-tomcat-security-manager-supported/m-p/28193#M12071 HiA security company has performed security checks on Alfresco and they have noted that Tomcat Security Manager has not been enabled. Can someone confirm whether Alfresco works reliably with Security Manager enabled?We are currently running Alfresco v4.2.5.2 on Red Hat 6.8 (Santiago)Many thanks Tue, 28 Mar 2017 08:35:09 GMT https://connect.hyland.com/t5/alfresco-forum/is-tomcat-security-manager-supported/m-p/28193#M12071 ibar78 2017-03-28T08:35:09Z Re: Is Tomcat Security Manager supported? https://connect.hyland.com/t5/alfresco-forum/is-tomcat-security-manager-supported/m-p/28194#M12072 <HTML><HEAD></HEAD><BODY><P>It always depends on what kind of security policy you are going to use with a SecurityManager. Since Alfresco is using a collection of 3rd party open source / industry Standard libraries you would have to deal with all their specific approaches to providing their functionality. From reflection to creating custom threads (instead of e.g. using container provided executors), arbitrary file system accesses and sub-process initiation, there are quite a lot of permission you would have to grant to various libraries. AFAIK there is no comprehensive example policy file provided anywhere that you could use as a starting point.</P></BODY></HTML> Tue, 28 Mar 2017 09:15:55 GMT https://connect.hyland.com/t5/alfresco-forum/is-tomcat-security-manager-supported/m-p/28194#M12072 afaust 2017-03-28T09:15:55Z