Access denied in javascript

Hi all
I have made additional software for the editor of the email bsp of the SAP CRM system.
This new software is called in an popup from without the default SAP CRM email editor.
Via an custom button.
In the default SAP CRM email editor there are several javascript libraries available which are used in that BSP page.
When i try to access them from without the new software within the popup. What should be possible.
The parent window can always be found via the 'WINDOW.OPENER'
It returns to me a javascript error : Access Denied.
I have checked if everything is in the same domain, and that is the case.
Also i made a custom bsp which opens the new software in a popup, and in that case it works.
What could it be?
Kind regards,
Anton Pierhagen

Hello,
I have the same issue.
I have relaxed the domain from my iframe so as I could launch some functions but when I try to click on an input field type Date, the popup cannot be displayed.
From my parent :
<script>
  function resizeIframe(width,height)
    document.getElementById('id_mon_iframe').width = width;
    document.getElementById('id_mon_iframe').height = height;
</script>
<iframe
width="100%"
name="frame_object"
src="/sap/bc/bsp/sap/my_test/index.do"
frameborder="0"
id='id_mon_iframe'>
</iframe>
From my iframe :
      <script type="text/javascript" language="JavaScript">
       function relaxDomain(input)
         if (input.search(/^\\d+\\.\\d+\\.\\d+\\.\\d+$/) >=0 )
           return input;
         var lnDotPos = input.indexOf(".");
         return (lnDotPos >= 0) ? input.substr( lnDotPos + 1 ) : input;
       function oniframeload()
         var result = relaxDomain(document.domain);
         var width = 2100;
         var height = document.body.scrollHeight + 50;
         if(result != document.domain)
           document.domain = result;
         parent.resizeIframe(width,height);
       </script>
     </htmlb:form>
   </htmlb:page>
</htmlb:content>
JS Error message :
Détails de l’erreur de la page Web
Agent utilisateur : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Horodateur : Sun, 21 Dec 2014 15:10:28 UTC
Message : Accès refusé (Access Denied).
Ligne : 125
Caractère : 3
Code : 0
URI : http://xxxxx.xxxxx.xxx:xxxx/sap/public/bc/ur/Design2002/js/popup_ie6.js?6.0.17.0.0
Anyone with an idea?
Thx.

Similar Messages

  • Access denied executing Javascript

    Hello all
    I need help please.
    I have programmed a portal application where I have used a Javascript Library (tinyMCE editor). Everything works fine in Internet explorer and Mozilla firefox when I execute it in the portal we use for development. When I execute this same development in the productive machine it works in firefox but in explorer i received a javascript error: Access Denied and the editor doesn´t show properly.
    Please, I need help with this. I don´t know where to look or what to do.
    Any help will be rewarded with points.
    Thanks in advance

    Hi,
    i want to replace the standdard html editor in the Web Page Composer with the tinyMCE. I followed the steps explained in this [document|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f04b5c5d-3fd2-2a10-8ab0-8fa90e3ac162]. When I launch the editor, for example by creating a new paragraph, I see the TinyMCE UI in the popup window but I can't access the functionality. A Javascript Error is also appearing : Access denied... So I tried to locate the error. I copied the source text of the popup window and created a new html file in km-content with the source code. When I am deleting the function call EPCM relaxDocumentDomain everything works fine. So I tried to implement the following code into the function relaxDocumentDomain:
    EPCM.relaxDocumentDomain = function(){
    try {
      if(noDomainRelaxation == 'true') {
          //Don't Relax the domain
    } catch(err)
      var newDomain = this.getRelaxedDomain();
        if( newDomain != document.domain ){
          document.domain = newDomain;
        this.calculateDynamicTop();
    and changed the following code in the tiny_mce.js from
    document . write('< script id=__ie_onload defer src= \ 'java script:"" \ ';> < \ / script>');
    to
    document . write('< script id=__ie_onload defer src= \ 'java script:"" \ ';>noDomainRelaxation = 'true' < \ / script>');
    But that does not work, because the the variable noDomainRelaxation is declared after the check in the relaxDocumentDomain function. Does anybody have an idea how to solve this problem? Is it perhaps possible to set the right document domain in the tinymce itself? Thanks.
    Edit: Problem solved by using the latest TinyMCE Version.

  • Portlet editor's rich text editor gives javascript error 'access denied'

    I created a header portlet using the Publisher's published content portlet template. When I try to edit the portlet content using the rich text editor in the portlet editor window, I get a javascript error in the status bar stating 'access denied'. I can't even type into the rich text editor window, it's totally disabled. Not that I see anything in there anyway. I'm logged in as admin. I've gone into the publisher explorer admin portlet and even 'published' the portlet's content, but to no avail. When I try to 'add header portlet' in my experience definition and try to use this portlet, nothing shows up, where the header portlet should be is just collapsed so my banner is just the top bar view bumped right on top of the nav view. (p.s. does anyone know how to take the alui doc's suggestion of 'disabling the topbar view and nav view' so that I can construct what I want entirely in a header portlet? Anyway, first things first, how do I get that access denied message to disappear in my header portlet's rich text editor and how the heck do I get it show up? Help.

    There's probably not a developer in the forum that doesn't uncheck that box the moment they rebuild their machine/ennvironment. Changing the format of error messaging is hardly a fix for the error itself. Personally, I'm uploading 'file content items' now. I create the content in notepad and then upload > file content item. Then create a portlet that uses the pre-existing (was installed w/ publisher using their pte) 'published content item' web service. Go into the portlet's settings and associate the portlet w/ the content item you uploaded. Voila.
    As far as using their rich text editor to create new content, I personally have no need anymore. However I'm sure our content managers will probably have to soon so I hope our latest installation will accommodate them w/o error, because I've never been aware of an actual fix to this problem.

  • Javascript "Access Denied" when disabling Ctrl+N in an Iframe

    Hello Gurus,
    I have disabled the CtrlN from whole IC WebClient application, however I realized that if we focus on Email Editor (whether Disabled or Enabled) I could still get CtrlN clicked for a new window.
    I tried the usual way as it is an IFRAME but now I am getting error "Access Denied".
    It seems to be a domain relaxing issue to me & I am curious if we have pages from same server why this error is coming.
    Any ideas, thoughts would be appreciated.
    Regards,
    Ankur

    Hello Raja,
    The issue seems to be unresolved. There is no way I could get rid of this error.
    The document relaxing code is there in generated JS file. It seems when an IFRAME is in designmode it couldn't trap events or maybe something like that.
    regards,
    Ankur

  • File read access denied for signed applet

    Hi:
    I have a signed applet with a certificate generated with the keytool. Yet, I keep getting this error:
    java.lang.Exception: java.security.AccessControlException:
        access denied (java.io.FilePermission C:\WINDOWS\system32\aetpkss1.dll read)The error is produced when the method loadKeyStore(pin) below is called.
        private KeyStore ks;
        private Provider provider;
        private static final String providerName    = "PKCS11";
        private static final String providerLibrary = "aetpkss1.dll";
        public void loadKeyStore(String pin) throws IOException,
         CertificateException, KeyStoreException, NoSuchAlgorithmException {
         if (provider == null)
             registerProvider(providerLibrary);
         try {
             ks = KeyStore.getInstance(providerName,provider);
         } catch (Exception e) {
             throw new KeyStoreException("Failed get keystore instance\n"
                             + e.getMessage());
         try {
             ks.load(null, pin.toCharArray());
         } catch (Exception e) {
             throw new KeyStoreException("Failed load keystore\n"
                             + e.getMessage());
        public void registerProvider(String library)
         throws FileNotFoundException, KeyStoreException {
         String fileName;
         if (new File(library).isAbsolute())
             fileName = library;
         else
             fileName = getAbsolutePath(library);
         if (!(new File(fileName).exists()))
             throw new FileNotFoundException("No such file: " + fileName);
         String config = "name = " + providerName + "\n"
             + "library = " + fileName;
         ByteArrayInputStream confStream =
             new ByteArrayInputStream(config.getBytes());
         try {
             provider = new sun.security.pkcs11.SunPKCS11(confStream);
             Security.addProvider(provider);
         } catch (Exception e) {
             throw new KeyStoreException("Can initialize " +
                             "Sun PKCS#11 provider. Reason: " +
                             e.getCause().getMessage());
        private String getAbsolutePath(String lib) throws FileNotFoundException {
         String[] searchPath;
         /* NOTE: This should be modified to suit different versions of   *
          *       Windows and not just Windows XP                         */
         if (System.getProperty("os.name").matches("^(?i)Windows.*")) {
             searchPath = new String[] { "C:\\WINDOWS\\system32" ,
                             "C:\\java" };
         } else {
             searchPath = new String[] { "/usr/local/lib/" };
         for (int i = 0; i < searchPath.length; i++) {
             if ((new File(searchPath[i] + File.separator + lib).exists()))
              return (searchPath[i] + File.separator + lib);
         throw new FileNotFoundException("Library not in search path " + lib);
        }The above code is called by a java script, the class' constructor is empty.
    The error appears not to be caught by my code. I have tried to insert try/catch statements everywhere to figure out where this error is produced.
    The code is write off of the applet for signing with a smart card by Svetlin Nakov - and his applet works!
    I have also made a CLI application that uses the above code and it works perfectly.
    So: Something is wrong either with my certificate, the signing method, signature verification or something completely different. Any hints?
    The certificate I generated with
    keytool -genkey -keystore mystore -alias me
    keytool -seflcert -keystore mystore -alias meI have tired both with and without the selfcert step.
    Thanks! Erik

    The problem has been identified: Placing registerProvider() in the constructor the error no longer occurs, instead an error is produced when the key store is loaded.
    It appears that the javascript code is not trusted and so, even though the applet is signed, access privileges are restricted to those of the java script.
    A solution to this problem is not clear, but possibly, serving the pages from a trusted server, the java script will be trusted, some documentation seem to indicate.

  • Access Denied error in IE 6 when opening popup calendar

    We are in the process of migrating from external ITS to internal ITS. We use a javascript popup calendar which is working fine in the old external ITS, but in the internal ITS we are getting an error 'Access Denied'. This error is only occuring in IE. In Firefox the calendar is working fine.
    I have read some information about this problem and it appears that IE has made it more secure for popup windows called from a differernt domain. Why is this message appearing with the Internal ITS. The javascript for the calendar is held within the service files and published to Internal with the other pages. The javascript is being found ok, it is just when the window.open is called that there is a problem.
    I have read some posts about this, but none that solve the problem. It talks about SAP using domain relaxing. How do I do this?
    I have tried running SAPWF_bindPageToOrigin() from SAPWEBFRAMEWORK.JS in the head of my web page, but this doesn't seem to have any affect. Could it be that I'm using it wrong?
    Can anyone help?
    Thank you
    Karen

    Hi Karen,
    if you remember, Can you please guide me on how did you modify the JS file SAPWEBFRAMEWORK.JS in ECC.
    Thanks .

  • Why signed and get "access denied (java.io.FilePermission hello.txt read)"?

    I am learning the Java tools and policy to create some local browser application for personal use. So I signed a jar file with jarsigner, keytool and policytool and still trying to figure out why my browser application cannot read a simple local text file.
    My question are
    1. Why use java policy tool (policytool.exe)? If I signed a .jar with keytool and jarsigner, do I really need java policytool to write a policy?
    2. What is the maximum validity days? 365? or more? Do I need to sign again when validity expire?
    3. I don't want any of my local browser application gets to internet but only work with local files (read, write, or execute). how do I do that?
    4. how to use java security policy to grant access to the jar applet? where do I place and import the policy file so the hosting web browser and the applet can work?
    My java applet is a simple class that read a text line from a local file in the same folder, and pass the result to a calling web browser Javascript.
    Currently the result in the web page is the error message below, even though the jar is signed correctly.
    access denied (java.io.FilePermission hello.txt read)
    Someone please help and enlight the newbie!

    leoku wrote:
    I am learning the Java tools and policy to create some local browser application for personal use.Why would you wrap a mostly useless and unhelpful browser window around a Java app. for 'local' use?
    .. So I signed a jar file with jarsigner, keytool and policytool and still trying to figure out why my browser application cannot read a simple local text file.
    My question are
    1. Why use java policy tool (policytool.exe)? If I signed a .jar with keytool and jarsigner, do I really need java policytool to write a policy?No. In fact, don't stuff around with policy files - they are a path to madness.
    2. What is the maximum validity days? 365? or more?Keytool accepts an argument for the number of days to remain valid. I do not believe it has an upper limit, but it might be best to experiment with it and find out for yourself. Please report your findings back.
    (2a) Do I need to sign again when validity expire?No, but the end user gets a huge warning that the certificate has expired. Further, if it was a certificate that was certified by a CA, the 'always trust' check box which used to default to true, would now default to false.
    3. I don't want any of my local browser application gets to internet but only work with local files (read, write, or execute). how do I do that?I am not sure I understand, but if you only offer a JFileChooser for the applet to access resources, that should restrict it to resources off the local file-system. Of course, that would not restrict the end user from downloading something from the internet to their local disks, then accessing it using the applet.
    4. how to use java security policy to grant access to the jar applet? where do I place and import the policy file so the hosting web browser and the applet can work?The only place it will work is in the JRE directories of the end-user's machine. Even if you find a way to install your local policy file, do not go messing with the end-user's policy files.
    My java applet is a simple class that read a text line from a local file in the same folder,.. In the 'same folder' as what? (1)
    ..and pass the result to a calling web browser Javascript. That might be the problem. AFAIR, using JS with trusted applets causes the security to be tightened. Perhaps it could be fixed by calling System.setSecurityManager(null) on applet init(), but I have also seen references to using [AccessController.doPrivileged()|http://java.sun.com/j2se/1.4.2/docs/api/java/security/AccessController.html] to wrap the problematic code. I am hazy on the details of how/if that works.
    Currently the result in the web page is the error message below, even though the jar is signed correctly.
    access denied (java.io.FilePermission hello.txt read)
    1) If the answer to my question is what I suspect, there may be better ways to access the resource that are usable even in a sand-boxed app.

  • Java.security.AccessControlException: access denied ("java.security.SecurityPermission" "authProvider.SunMSCAPI")

    Till morning everything working fine in my applet. I took Java update and everything stopped. I'm dealing with digital certificate using applet. Here is my stack trace. I followed some oracle article but didn't work.
    https://blogs.oracle.com/java-platform-group/entry/liveconnect_changes_in_7u45
    JAR File Manifest Attributes for Security
    http://www.oracle.com/technetwork/java/javase/7u45-relnotes-2016950.html
    Java Plug-in 10.45.2.18
    Using JRE version 1.7.0_45-b18 Java HotSpot(TM) Client VM
    User home directory = C:\Users\vicky.thakor
    java.security.AccessControlException: access denied ("java.security.SecurityPermission" "authProvider.SunMSCAPI")
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at sun.plugin2.applet.AWTAppletSecurityManager.checkPermission(Unknown Source)
      at sun.security.mscapi.KeyStore.engineLoad(KeyStore.java:755)
      at sun.security.mscapi.KeyStore$MY.engineLoad(KeyStore.java:62)
      at java.security.KeyStore.load(Unknown Source)
      at SecurityApplet.initializeBrowserKeyStore(SecurityApplet.java:162)
      at SecurityApplet.isCertificateInstalled(SecurityApplet.java:268)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      at java.lang.reflect.Method.invoke(Unknown Source)
      at sun.plugin.javascript.Trampoline.invoke(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      at java.lang.reflect.Method.invoke(Unknown Source)
      at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass$MethodInfo.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass$MemberBundle.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass.invoke0(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass.invoke(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$DefaultInvocationDelegate.invoke(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$3.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo.doObjectOp(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$LiveConnectWorker.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
    I'm creating .java.policy file in public void init() method of applet. Its before accessing anything in applet. But its not working. Here is my .java.policy file.
    grant
    permission java.security.AllPermission;
    permission java.io.FilePermission "<<ALL FILES>>", "read";
    permission java.io.FilePermission "<<ALL FILES>>", "write";
    permission java.util.PropertyPermission "*", "read, write";
    permission java.util.PropertyPermission "user.home", "read";
    permission java.util.PropertyPermission "user.dir", "read";
    permission java.lang.RuntimePermission "modifyThread";
    permission java.lang.RuntimePermission "*";
    This is solved by changing java.policy file at C:\Program Files (x86)\Java\jre7\lib\security. I did it manually but our application running all around the world. And I can't go to each user to change the java.policy file. And also some user don't have admin access to change that file. So is there any way we can set runtime parameter(s) or something else... I already posted this question in stackoverflow but couldn't find the way out. I also created MANIFEST.MF file but still not working.
    Stackoverflow link: oracle - java.security.AccessControlException: access denied (&amp;quot;java.security.SecurityPermission&amp;quot; &amp;…

    Till morning everything working fine in my applet. I took Java update and everything stopped. I'm dealing with digital certificate using applet. Here is my stack trace. I followed some oracle article but didn't work.
    https://blogs.oracle.com/java-platform-group/entry/liveconnect_changes_in_7u45
    JAR File Manifest Attributes for Security
    http://www.oracle.com/technetwork/java/javase/7u45-relnotes-2016950.html
    Java Plug-in 10.45.2.18
    Using JRE version 1.7.0_45-b18 Java HotSpot(TM) Client VM
    User home directory = C:\Users\vicky.thakor
    java.security.AccessControlException: access denied ("java.security.SecurityPermission" "authProvider.SunMSCAPI")
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at sun.plugin2.applet.AWTAppletSecurityManager.checkPermission(Unknown Source)
      at sun.security.mscapi.KeyStore.engineLoad(KeyStore.java:755)
      at sun.security.mscapi.KeyStore$MY.engineLoad(KeyStore.java:62)
      at java.security.KeyStore.load(Unknown Source)
      at SecurityApplet.initializeBrowserKeyStore(SecurityApplet.java:162)
      at SecurityApplet.isCertificateInstalled(SecurityApplet.java:268)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      at java.lang.reflect.Method.invoke(Unknown Source)
      at sun.plugin.javascript.Trampoline.invoke(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
      at java.lang.reflect.Method.invoke(Unknown Source)
      at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass$MethodInfo.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass$MemberBundle.invoke(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass.invoke0(Unknown Source)
      at sun.plugin2.liveconnect.JavaClass.invoke(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$DefaultInvocationDelegate.invoke(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$3.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo.doObjectOp(Unknown Source)
      at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$LiveConnectWorker.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)
    I'm creating .java.policy file in public void init() method of applet. Its before accessing anything in applet. But its not working. Here is my .java.policy file.
    grant
    permission java.security.AllPermission;
    permission java.io.FilePermission "<<ALL FILES>>", "read";
    permission java.io.FilePermission "<<ALL FILES>>", "write";
    permission java.util.PropertyPermission "*", "read, write";
    permission java.util.PropertyPermission "user.home", "read";
    permission java.util.PropertyPermission "user.dir", "read";
    permission java.lang.RuntimePermission "modifyThread";
    permission java.lang.RuntimePermission "*";
    This is solved by changing java.policy file at C:\Program Files (x86)\Java\jre7\lib\security. I did it manually but our application running all around the world. And I can't go to each user to change the java.policy file. And also some user don't have admin access to change that file. So is there any way we can set runtime parameter(s) or something else... I already posted this question in stackoverflow but couldn't find the way out. I also created MANIFEST.MF file but still not working.
    Stackoverflow link: oracle - java.security.AccessControlException: access denied (&amp;quot;java.security.SecurityPermission&amp;quot; &amp;…

  • Getting access denied error while importing file using input type="file"

    Hi All,
    I am using struts application wherein I need to import file for some purpose.I have used input type="file" for the same which goes like:
    <input type="file" id="uploadFile" name="uploadFile" size="50">
    I have the import button on which I have used onClick event to call javascript function submitValues() used to validate all the fields from the page which goes like:
    <input type="button" name="select" value="Import" class="CSSButton" onClick="javascript:submitValues();">
    The JS function then in turn submits the form and calls the action.The problem is sometimes even when the correct path is specified for the file to be imported results in access denied error.This error comes sometimes and other times it works fine.But when this error comes,I need to relogin into the application and then it works fine.I am using IE7 for this.
    Any idea why I am getting access denied error while importing? Has it got something to do with IE7 version or with the input type="file" which is being used here?
    Thanks for any help if anyone can provide.
    Edited by: passionateforjava on Mar 4, 2009 2:18 AM

    vishnuS1984 wrote:
    Hi Friends,
    I have gone through scores of examples and i am failing to understand the right thing to be done to copy a file from one directory to another. Here is my class...So let's see... C:\GetMe1 is a directory on your machine, right? And this is what you are doing with that directory:
    public static void copyFiles(File src, File dest) throws IOException
    // dest is a 'File' object but represents the C:\GetMe1 directory, right?
    fout = new FileOutputStream (dest);If it's a directory, where in your code are you appending the source file name to the path, before trying to open an output stream on it? You're not.
    BTW, this is awful:
    catch (IOException e)
    IOException wrapper = new IOException("copyFiles: Unable to copy file: " +
    src.getAbsolutePath() + "to" + dest.getAbsolutePath()+".");
    wrapper.initCause(e);
    wrapper.setStackTrace(e.getStackTrace());
    throw wrapper;
    }1) You're hiding the original IOException and replacing it with your own? For what good purpose?
    2) Even if you had a good reason to do that, this would be simpler and better:
    throw new IOException("your custom message goes here", e);
    rather than explicitly invokign initCause and setStackTrace. Yuck!

  • Access denied: HTTP - Host Request with Widget Foundation + Yahoo

    Hi,
    I have a problem with the new Yahoo widget engine's (4.5) suggested structure, when trying to execute an RFC request.
    An older version of my .kon file has a classic structure, and it works fine, I write the script into the .kon file, it looks like this:
            <action trigger = "onLoad">
            <![CDATA[
                     // Standard SAP Widget Foundation Libraries
                     include("js/utils/Common.js");
                     include("js/utils/PlatformUtil.js");
                     include("js/utils/Timer.js");
                     include("js/utils/DataLoader.js");
                     include("js/utils/RFCRequest.js");
                     request.execute(function(response) ...
            ]]>
            </action>
    When I try to use the new structure (the .kon file contains only the source of the script, no CDATA, just  'src = "Scripts/Main.js"' ), and execute the request from the source JavaScript file, then I get this error:
    utils.DataLoader]> Exception was catched: XMLHttpRequest.send(): Access denied: HTTP - Host Request.
    Saw anybody this problem already?
    Thanks,
    Gyuri

    Hi,
    Yahoo has added security control in widgets since 4.5. You should add tag <security> in your widget.xml
         <security>
              <http>all</http>
              <filesystem>full</filesystem>
              <command>true</command>
              <hotkey>true</hotkey>
         </security>
    http://widgets.yahoo.com/static/downloads/WidgetsReference_4.5.zip page 33.
    Eriks

  • AccessControlException: access denied !Again!

    Hi all,
    I hava an applet which is signed.
    I want it to be a way to check filesize. I enter the path of the file in value attribute of <param> tag.
    In my class when I do:
    boolean oki=false;
        public void init(){oki=new File(getParameter("path")).exists();}
        public boolean isOki(){return oki;}and later in html document.getElementByID('applet').isOki(); I get true.
    But this only works with the initial value (ex. e:\ring.mp3).
    When I change code in to this form:
    public void init(){}
    public boolean isOki(){return new File(getParameter("path")).exists();}I get java.security.AccessControlException: access denied (java.io.FilePermission e:\ring.mp3 read).
    Its quite annoying...
    Please help.

    You are not allowed to do unsecure actions from methods called from javascript. Start a looping thread from the init method which checks for a changed variable makes the File call.
    Erik

  • Change to https - access denied when calling catalog

    Hi,
    we use SRM7.0 and SRM-MDM catalog. So far we use https and everything works fine. Now we change to https and have problems when calling the catalog. There is a JavaScript error: Access denied.
    In the html sourcecode we now have this:
    action="https://:/sap/sapsrm/outbound_hdlr"
    before there was:
    action="http://<server>:8000/sap/sapsrm/outbound_hdlr"
    I think we have forgot a setting. Any ideas?
    Thanks and best regards,
    Roman

    Hello
    We resolved the issue as follows:
    Run SPRO
    Go to Supplier Relationship Management -> SRM Server -> Master Data -> Content Management -> Define External Web Services
    Select the catalogue
    Double click Standard Call Structure
    Add the following:
    Parameter = BYPASS_OUTB_HANDLER, Value = X, Type = Fixed value
    Parameter = BYPASS_INB_HANDLER, Value = X, Type = Fixed value
    Click Save
    The settings should take effect immediately.
    Regards
    Joe

  • Java.security.AccessControlException: access denied (java.lang.RuntimePerm

    Hi, I am receiving the following error when I attempt to add a crypto provider.
    java.lang.ExceptionInInitializerError
         at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
         at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
         at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
         at java.lang.reflect.Constructor.newInstance(Unknown Source)
         at java.lang.Class.newInstance0(Unknown Source)
         at java.lang.Class.newInstance(Unknown Source)
         at sun.security.jca.ProviderConfig$3.run(Unknown Source)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.security.jca.ProviderConfig.doLoadProvider(Unknown Source)
         at sun.security.jca.ProviderConfig.getProvider(Unknown Source)
         at sun.security.jca.ProviderList.loadAll(Unknown Source)
         at sun.security.jca.ProviderList.removeInvalid(Unknown Source)
         at sun.security.jca.Providers.getFullProviderList(Unknown Source)
         at java.security.Security.removeProvider(Unknown Source)
         at com.gro.applet.GROAuthenticateApplet$2.run(GROAuthenticateApplet.java:192)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.gro.applet.GROAuthenticateApplet.validateUser(GROAuthenticateApplet.java:181)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
         at java.lang.reflect.Method.invoke(Unknown Source)
         at sun.plugin.javascript.JSInvoke.invoke(Unknown Source)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
         at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
         at java.lang.reflect.Method.invoke(Unknown Source)
         at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
         at sun.plugin.com.MethodDispatcher.invoke(Unknown Source)
         at sun.plugin.com.DispatchImpl.invokeImpl(Unknown Source)
         at sun.plugin.com.DispatchImpl$1.run(Unknown Source)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.plugin.com.DispatchImpl.invoke(Unknown Source)
    Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission loadLibrary.sunmscapi)
         at java.security.AccessControlContext.checkPermission(Unknown Source)
         at java.security.AccessController.checkPermission(Unknown Source)
         at java.lang.SecurityManager.checkPermission(Unknown Source)
         at java.lang.SecurityManager.checkLink(Unknown Source)
         at java.lang.Runtime.loadLibrary0(Unknown Source)
         at java.lang.System.loadLibrary(Unknown Source)
         at sun.security.mscapi.SunMSCAPI$1.run(SunMSCAPI.java:34)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.security.mscapi.SunMSCAPI.<clinit>(SunMSCAPI.java:32)
         ... 32 more
    java.lang.Exception: java.lang.ExceptionInInitializerError
         at sun.plugin.com.DispatchImpl.invokeImpl(Unknown Source)
         at sun.plugin.com.DispatchImpl$1.run(Unknown Source)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.plugin.com.DispatchImpl.invoke(Unknown Source)I read somewhere that it is "Due to an additional dll that needs to be loaded for the Sun Java SE 6 JVM we get an exception during initialization"
    Does anyone have any other information on this bug?

    I have just bumped into this with a Webstart application.
    It seems to happen only on certain machines.
    Is there a solution to this problem?

  • Java.security.AccessControlException: access denied; for a signed applet

    Hi,
    I have a signed applet which is used to read local files. When I call the applet method which is reading the file, from javascript I am getting "java.security.AccessControlException: access denied ". Where as if the method gets called during applet load, file is read without errors? How can I get over this problem?
    If there is a way loading the applet based on a condition from Javascript, please let me know.
    Thanks,

    [http://forums.sun.com/thread.jspa?forumID=421&threadID=5308353]

  • GetElementById access denied

    Hello,
    I have 2 views (1 controller for each view).
    In one view, i tried to change the value in a textfield from the 2. view.
    I use the javascript-function:
    opener.document.getElementById(str_btn_f4_id).value = id;
    I get the javascript- error message: access denied
    Can you help me?
    Best regards
    Alberto

    Look at the below thread.
    Same issue discussed & resolved.
    Re: executing window.opener.FunName from Web IC pop-up = Permission Denied
    <b>*Reward each useful answer</b>
    Raja T

Maybe you are looking for