apache / apache/hugegraph

[Bug] SecurityException: Not allowed to read file via Gremlin

Open
#2,174 3 comments 0 reactions 1 assignee Claimed by @javeme View on GitHub
bug
Dominant language
Java
Stars
3.2k
Forks
636
Avg merge
3d 11h
Merged PRs (30d)
14

Description

### Bug Type (问题类型)

others (please edit later)

### Before submit

- [X] 我已经确认现有的 [Issues](https://github.com/apache/hugegraph/issues) 与 [FAQ](https://hugegraph.apache.org/docs/guides/faq/) 中没有相同 / 重复问题 (I have confirmed and searched that there are no similar problems in the historical issue and documents)

### Environment (环境信息)

- Server Version: 1.0.0 (Apache Release Version)
- Backend: RocksDB x nodes, HDD or SSD
- OS: xx CPUs, xx G RAM, Ubuntu 2x.x / CentOS 7.x
- Data Size: xx vertices, xx edges

### Expected & Actual behavior (期望与实际表现)

在hubble上执行gremlin如`g.V()`语句后,会出现以下WARN日志,帮看下原因

`2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/groovy/runtime/metaclass/Script3MetaClass.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3BeanInfo.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3BeanInfo.groovy
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3BeanInfo.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3Customizer.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3Customizer.groovy
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/Script3Customizer.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/groovy/runtime/metaclass/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/GraphTraversalSourceMetaClass.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/GraphTraversalSourceBeanInfo.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/GraphTraversalSourceBeanInfo.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/GraphTraversalSourceCustomizer.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/GraphTraversalSourceCustomizer.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/codehaus/groovy/runtime/callsite/PojoMetaMethodSite$PojoCachedMethodSite.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/Bytecode$Instruction.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/dsl/graph/DefaultGraphTraversal.class
2023-03-20 10:35:37 [gremlin-server-exec-2] [WARN] o.a.h.s.HugeSecurityManager - SecurityException: Not allowed to read file via Gremlin: /usr/lib/jvm/java-11-openjdk-11.0.18.0.10-1.el7_9.x86_64/lib/org/apache/tinkerpop/gremlin/process/traversal/util/DefaultTraversal.class`

### Vertex/Edge example (问题点 / 边数据举例)

_No response_

### Schema [VertexLabel, EdgeLabel, IndexLabel] (元数据结构)

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.