elasticsearch的分词插件报错java.security.AccessControlException: access denied (“java.lang.RuntimePermissio

java.security.AccessControlException: access denied (“java.lang.RuntimePermission” “getClassLoader”)

我把报错信息列一下

java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:1.8.0_181]
        at java.security.AccessController.checkPermission(AccessController.java:884) ~[?:1.8.0_181]
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) ~[?:1.8.0_181]
        at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1528) ~[?:1.8.0_181]
        at java.lang.Thread.getContextClassLoader(Thread.java:1443) ~[?:1.8.0_181]
        at com.alibaba.fastjson.serializer.SerializeConfig.getObjectWriter(SerializeConfig.java:453) ~[?:?]
        at com.alibaba.fastjson.serializer.SerializeConfig.getObjectWriter(SerializeConfig.java:442) ~[?:?]
        at com.alibaba.fastjson.serializer.JSONSerializer.getObjectWriter(JSONSerializer.java:448) ~[?:?]
        at com.alibaba.fastjson.serializer.JSONSerializer.write(JSONSerializer.java:309) ~[?:?]
        at com.alibaba.fastjson.JSON.toJSONString(JSON.java:769) ~[?:?]
        at com.alibaba.fastjson.JSON.toJSONString(JSON.java:707) ~[?:?]
        at com.alibaba.fastjson.JSON.toJSONString(JSON.java:672) ~[?:?]
        at org.elasticsearch.gridsum.plugin.util.HttpRequest.doPostBody(HttpRequest.java:168) ~[?:?]
        at org.elasticsearch.gridsum.plugin.extend.GridsumTokenizer.incrementToken(GridsumTokenizer.java:72) ~[?:?]
        at org.elasticsearch.action.admin.indices.analyze.TransportAnalyzeAction.simpleAnalyze(TransportAnalyzeAction.java:234) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.admin.indices.analyze.TransportAnalyzeAction.analyze(TransportAnalyzeAction.java:214) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.admin.indices.analyze.TransportAnalyzeAction.analyze(TransportAnalyzeAction.java:138) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.admin.indices.analyze.TransportAnalyzeAction.shardOperation(TransportAnalyzeAction.java:121) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.admin.indices.analyze.TransportAnalyzeAction.shardOperation(TransportAnalyzeAction.java:73) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.support.single.shard.TransportSingleShardAction.lambda$asyncShardOperation$0(TransportSingleShardAction.java:110) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.ActionRunnable.lambda$supply$0(ActionRunnable.java:58) ~[elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.action.ActionRunnable$2.doRun(ActionRunnable.java:73) [elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:692) [elasticsearch-7.7.1.jar:7.7.1]
        at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-7.7.1.jar:7.7.1]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_181]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_181]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_181]

出现这个问题的主要原因是es的插件程序对于jdk权限的不足，解决方式当然是赋权了。

我从网上看到了两种解决方式，一种是修改JDK的权限，另外一种就是我下面说的这种方式，修改es插件对jdk的操作权限。为啥不用第一种呢，操作jdk的话，换一个机器或者换个jdk就需要弄一次，麻烦。

解决办法：
1、在es的config下创建policy.policy,内容如下：

grant {
	permission java.net.SocketPermission "*:*","connect,resolve";
	permission java.lang.RuntimePermission "getClassLoader"; 
};

2、在es的config/jvm.options中插入这样一句话：路径为上文添加的policy文件的路径

-Djava.security.policy=D:\elasticsearch-7.7.1\config\policy.policy

重启elasticsearch即可