Can distribution of a .java.policy file be eliminated

Sorry for the stupid question, but I'm fairly new to the realm of dealing with Java security...
I have an applet that I want to deploy worldwide as part of an upgrade to an existing website, but I've run into the following error:
"Error getting connection to: jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=192.168.0.101)(PORT=1521)))(CONNECT_DATA=(SID=EKB)(SERVER=DEDICATED))) using oracle.jdbc.driver.OracleDriver
access denied (java.util.PropertyPermission oracle.jserver.version read)"
I have managed to figure out that I can eliminate this problem by placing a .java.policy file on all client machines that contain the following:
"grant {
permission java.util.PropertyPermission "oracle.jserver.version", "read";
However, is there any way to eliminate the need to distribute the policy file to those wanting to use the web site's applet? Can it be done somehow within the SSL certificate that I seemingly also have to distribute?
Any help for this newbee would be appreciated!

In contrast to what many people say in this forum, it is possible to have an unsigned applet access a database. You don't even have to manipulate the client's policy-file. The requirement is that the database is located on the same machine as the applet is downloaded from.There are however other things that can break this possibility. One is the database-driver itself.
In the case of Oracle we have tried using different versions of the driver. When using version 8.1.7 or 9.0.1 things work nicely, but when switching to version 9.2 it stops working. There is a question on OTN [1]. Let's see what Oracle has to say about it.
[1] Problem connecting using Oracle JDBC drivers

Similar Messages

How to handle the java.policy file ?

Can somebody tell me how to handle the java.policy file?
I always get java.net.SocketExceptions and java.security.AccessControlExceptions while connecting to an appserver from an applet.
What do I have to write in the java.policy file, where do I have to place it and do I have to call it in some way form my applet?
Thanks in advance.
don call

The java.policy file goes in your jre installation directory in .../jre/lib/security (there should be one there already).
I used it to allow otherwise restricted permissions for an applet using javax.comm. Add something like the following to the file:
grant codeBase "URL:http://yourDomainName/rootDirectoryOfYourApp/*" {
permission java.security.AllPermission;
This will give the applet downloaded from your site all permissions. You might want to give only certain permissions, I don't know.
Teri

File Access with unsigned Applet through editing the java.policy file

I'am starting to lose my hair on this...
I am trying to get an applet to run so that it can access the file system to move files on my local maschin. Because this applet is only running on my VM i can change the java.policy to avoid the signing of the applet.
first of all, if i wrote in the java.policy file
grant {
permission java.security.AllPermission;
};everything is working perfekt.
But I have not the intention to open the gates for any applet out there, so i want to limit the access to my applet. With every of the following versions I get at best an
java.security.AccessControlException: access denied (java.io.FilePermission...
My Setup
My Java Version: jre1.6.0_02
My applet is located unter the url
http://admin.mydomain.com/applet.jar
In Html i tryed the following different versions of loading the applet - none worked
<applet codebase="http://admin.mydomain.com/" name="shortcut" code="start.class" archive="applet.jar" width="0" height="0"></applet>
<applet codebase="http://admin.mydomain.com" name="shortcut" code="start.class" archive="applet.jar" width="0" height="0"></applet>
<applet name="shortcut" code="start.class" archive="http://admin.mydomain.com/applet.jar" width="0" height="0"></applet>in java.policy i tryed following versions with every html applet load version
grant codeBase "http://admin.x-press.de/-" {
permission java.security.AllPermission;
grant codeBase "http://admin.x-press.de/+" {
permission java.security.AllPermission;
grant codeBase "http://admin.x-press.de/applet.jar" {
permission java.security.AllPermission;
};why is it with
grant {
permission java.security.AllPermission;
};working, and not with the other versions?
i am almost bold now, please try to save my last hair from falling down.
any suggestion would be nice
thanks, feyyaz
Message was edited by:
feyyazdogu

I read the mentioned documentation and your right, some of my versions were wrong, but after reading the doumentation again i came to following result which should had worked but didn't.
java.policy
grant codeBase "http://admin.mydomain.com/*" {
permission java.security.AllPermission;
HTML File
<applet codebase="http://admin.mydomain.com/" name="shortcut" code="start.class" archive="applet.jar" height="0" width="0"></applet>if I am entering http://admin.mydomain.com/applet.jar i can download the jar, so the archive lays in the correct directory.
what i am doing wrong? do i have to change an additional file somewhere else?

Essential question concerning java.policy file

I have been searching this forum for an answer to this question:
Is there a way to run a signed applet on an intranet (via the Plugin) with out having to go around to each user's workstation and change their java.policy file?
So far, I have seen this question asked several times but with no concrete answer.
Thanks for any help!

You can create your own Policy implementation as shown in the following link :
http://www.javageeks.com/Papers/JavaPolicy/index.html
This has some drawbacks.
I overcame your problem by writing my own Security Manager.

Java.policy file - Must I change it?

I just got a certificate from Verisign with which I signed my applet. It works fine and now I want to distribute it to a group of users.
Back when I was developing the applet with a self-signed cert, I changed the java.policy file to allow the applet to do things 'outside the sandbox'.
I thought, perhaps mistakenly, that when I got the Verisign ceritifcate I would not need to concern myself with java.policy in any way. But now, even with the Verisign cert, my applet won't run correctly w/o the updated policy file.
This is only important to me as I do not want to go around to 'x' number of user workstations and modify each java.policy file.
Am I missing something??
thanks

You mention
"you should be able to remove the policy file and users can just accept the certificate "
I experience the same, remove all policy files, signed applets can then access resopurces on the local machine. However, practically all the documentation I read regarding JAVA 2 (I'm using 1.4.1_02) says you must have a policy file when using a signed applet. At least they say sign your applet and then indicate what the policy file should look like to grant specific permissions for that applet. I find no policy file will still allow a signed applet to access local files... Is this a bug in JAVA 2 1.4.1_02, or the correct behavior. thanks in advance.

Where to put java.policy file?

Under which directory the "java.policy" file must be kept in?

Hi!
The policy file must be indicated in the command line or by system property, when you starts the service, like the following: -Djava.security.policy = yourfile.policy. If you want to indicate another directory, you can do like this: -Djava.security.policy = C:\temp\yourfile.policy.
I hope it helps you,
Sandra.

How can I share a *.java source file across multiple projects in NetBeans?

I'm sure this simple and a pretty common operation but how can I share a *.java source file across multiple projects in NetBeans? Right now I keep cut, coping and pasting the same source file between multiple projects to re-use the same code. But I could I make this source file a library file or something like that so that I could access it from any project. I assume this would be a generic operation but I mentioned NetBeans for clarity. Thanks.

fiebigc wrote:
I know I mentioned NetBeans but I'm most interested in the generic method for creating a library of source files that I can call into whatever program I am developing. I've done such a thing in C using header files and such but I'm trying to get a direction on how this is accomplished in Java. I'm sorry if I could edit the title I would. If anyone wants to be specific about NetBeans I welcome that too.
Edited by: fiebigc on Jun 20, 2008 5:57 PM
>I know I mentioned NetBeans but I'm most interested in the generic method for creating a library of source files that I can call into whatever program I am developing. I've done such a thing in C using header files and such but I'm trying to get a direction on how this is accomplished in Java. I'm sorry if I could edit the title I would. If anyone wants to be specific about NetBeans I welcome that too.
Edited by: fiebigc on Jun 20, 2008 5:57 PM
Create a class library.
Write your code, compile it to .class files, put those class files in a .jar file and include the jar file in the classpath whenever you want to compile a project against it.

.java.policy file problem

Is there someone who knows how to reinitialise the java policy file at runtime?
My signed applet writes a policy file to the users home directory, but that file is only used after closing the browser and surfing back to our page. It should immediatly use that new file.
Someone who got some experience with that...?
Regards

And is it true that if you use a Thawte or verisign certificate, you will not have to change the .java.policy file?

".java.policy" file where is this located

Hi,
Where is the .java.policy file located. Do I have to create it? Do I have to use any editor for this? Please help me.
Thank you,
Regards
Uma

It'll probably be in the lib/security directory of your JRE.
If you've got a JDK then it'll be something like jdk1.3/jre/lib/security/java.policy

How can I create a Java help file (*.hs)?

How can I create a Java help file (*.hs)?

Thanks a lot.
I know it is rather poorly used, but I still need it for our current software
Mit freundlichen Grüßen / With best regards
Hans-Jürgen Hengsbach - Produktmanagement / Product Management (-227)
Von: Peter Grainge [email protected]
Gesendet: Dienstag, 29. April 2014 16:48
An: Hengsbach.Hans-Juergen
Betreff: How can I create a Java help file (*.hs)?
Re: How can I create a Java help file (*.hs)?
created by Peter Grainge <http://forums.adobe.com/people/Peter+Grainge> in RoboHelp - View the full discussion <http://forums.adobe.com/message/6340535#6340535

Where can I download the unrestricted policy files for the JCE?

I'm getting errors because I don't have the unrestricted policy files for the JCE. I've checked Sun's website, but I can't find them anywhere. Can someone provide me a link?

At the bottom of the JDK download page - http://java.sun.com/j2se/1.5.0/download.jsp

How can i run a java class file from shell?

Hi all,
I've a .class file named "File" that contains Main method, it is in the package "File2".
How can I run it by shell command?
PS: "java -cp . file" doesn't work it launch->
Exception in thread "main" java.lang.NoClassDefFoundError: File2/File (wrong name: File2/File)
Thanks in advance.

Just to understand: is File2 ar jar archive or not? If it is a jar archive, have you tried open File2.jar? If File2 is a directory within the current directory, have you tried java -cp . File2/File? I just tested with a set of classes and it works... Let me be precise:
* Let us imagine you are working in a directory whole path is PathToDir/
* in this directory you have the classes put in a directory called File2
* in order to launch File.class then you would have to invoke :
cd PathToDir/ (just to be sure)
java -cp . File2/File
*if you were to do the following then you would have the problem you describe
cd PathToDir/File2/
java -cp . File

How can I rewrite the java.io.file class to a custom file class?

Hi All!
Im new to Java. Well, I did some experiments with small Applets. Because it is not allowed to use Files in an unsigned Applet, I need to know, how I can manage to overwrite the java.io.File class. The background: I have to port some Applications which need file access into Applets.
I think it is necessary to create a class with the same signature then the Java.io.File that stores the information in an database on the Webserver or read information from there. Then overload the java.io.File with my custom file class.
Is this possible and, if so, how?
Thanks!

Hi yawmark !
Thanks for the quick answer! My idea to store the filecontent into a database is caused by the plan to make the application-port independent from the workstation executing it. So it would be a nice feature storing the "files" into a database.
JavaBeginner2009

How can I access my java class file in a .jar file ...PLz Help anyone!!

Hi Folks,
I am new in Java programming, have a .jar file that contains .java files that I want no access and use from another .java file. These files in the .jar file basically form a library thus have no main-method. However I can not declare an instance of the library (in the .jar file) and use it within my program.
Plz help ...I have tried all I know in vain.
Thanks.

temba wrote:
Hi Folks,
I am new in Java programming, have a .jar file that contains .java files that I want no access and use from another .java file. These files in the .jar file basically form a library thus have no main-method. However I can not declare an instance of the library (in the .jar file) and use it within my program. You are making little sense. You can't instantiate .java files.
Plz help ...I have tried all I know in vain.
Thanks.Could you post WHAT you have tried and also post what error messages you received?

Unrestricted policy files & java webstart

Can I make the unrestricted policy files be installed through java web start?

Is it even possible?
I am using a Java 1.5

Can distribution of a .java.policy file be eliminated

Similar Messages

Maybe you are looking for