Access denied when using Desktop-API

Question

Hi to all,
I have a client app that is launched using JWS. In my JNLP file I declared:
<security>
     <j2ee-application-client-permissions/>
</security>
and all jar-files are signed with the same certificate. This is working fine, but when I try to use the Desktop-API to open a folder on clients machine
Desktop.getDesktop().open(new File("/path/to/dir"));
it gives me
java.security.AccessControlException: access denied (java.io.FilePermission <<ALL FILES>> execute)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.awt.Desktop.checkExec(Unknown Source)
     at java.awt.Desktop.open(Unknown Source)
I even tried with
<security>
     <all-permissions/>
</security>
in JNLP. But it gives me the same Exception. I also tried to use a PrivilegedAction to make SecurityManager not check permissions, but it didn't help. At last thought about having my own policy-file. But I don't know how to tell the JWS app to use it.
Thanks for help in advance
Christian

Answer 1

Hi to all,
Deleting the cache works fine. But only for one start.
I found the JNLP in the cache has been automatically updated with the line
<update check="timeout" policy="always"/>
I thought this could be the problem, because if may be the SecurityManager finds JNLP in the cache being different from that one on the server, it "thinks" it has been hacked?
To avoid this difference, I added the line right from the beginning, but that didn't help.
BTW I signed all my jars, but the JNLP-File is just provided in the working dir of the app unsigned. Somewhere I read about JNLP-Files also signed. May be I have to sign it, too, or is it possible to have it packed in my application jar (then it will be signed with it)?
Thank for any hints
Christian