dweiss commented on code in PR #13164: URL: https://github.com/apache/lucene/pull/13164#discussion_r1515191064
########## gradle/testing/randomization/policies/replicator-tests.policy: ########## @@ -92,3 +90,14 @@ grant { // Allow reading from classpath JARs (resources). permission java.io.FilePermission "${gradle.user.home}${/}-", "read"; }; + +// Grant reflection permissions to certain JARs (https://github.com/apache/lucene/pull/13146) +grant codeBase "file:${randomizedtesting.jar}" { + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; +}; +grant codeBase "file:${junit.jar}" { + permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; +}; +grant codeBase "file:${lucene.test.framework}${/}-" { Review Comment: It's not just the jar - it's everything under the build folder... extracting the jar name from another subproject is problematic, also because the test framework itself uses Test tasks. I thought this was the easiest way to accomplish the goal - but I admit it also contributed to the name of the PR... -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org