Title:
CFZip requires "execute" permissions for "<<ALL FILES>>" when Sandbox Security is enabled
| View in TrackerStatus/Resolution/Reason: Closed/Fixed/
Reporter/Name(from Bugbase): Jake Hand / Jake Hand (Jake Hand)
Created: 01/12/2015
Components: Security
Versions: 11.0
Failure Type:
Found In Build/Fixed In Build: CF11_Final /
Priority/Frequency: Major / All users will encounter
Locale/System: English / Win 2012 Server x64
Vote Count: 1
Problem Description:
When Sandbox Security is enabled, a sandbox must have "execute" permissions for "<<ALL FILES>>" listed or cfzip will give a permissions error.
Steps to Reproduce:
Create a basic sandbox for a site, then try to unzip an archive:
<cfzip action = "unzip"
destination = "D:\path\to\zipfile\"
file = "D:\path\to\zipfile\test.zip"
overwrite="true">
Actual Result:
Error Occurred While Processing Request
Exception encountered while extracting from zip file D:/path/to/zipfile/test.zip.
java.security.AccessControlException: access denied ("java.io.FilePermission" "<<ALL FILES>>" "execute")
Expected Result:
ColdFusion unzips file without error.
Any Workarounds:
Add an entry to the Files section of the sandbox, giving Execute permissions to <<ALL FILES>>. Alternatively, disable Sandbox Security if not required. Neither of these are viable workarounds for our environment.
----------------------------- Additional Watson Details -----------------------------
Watson Bug ID: 3919630
External Customer Info:
External Company:
External Customer Name: jakefusion
External Customer Email:
External Test Config: My Hardware and Environment details:
- Windows 2012
- IIS 8
- CF 11,0,03,292480Attachments:
Comments: