Direct File System access problems from JAWS application

Hello,
I have built a Web Start application that consists of a Webserver (Jetty) ,
a WAR file and a Java (main) class that deploys the web application on
the server and starts the server. It all works fine, apart from the fact
that I am getting java.security.AccessControlExceptions when I try to
access the local filesystem or system variables like the java.io.tmpdir.
I have signed all the jar files and I included the<security> <allpermissions />
</security> tag in the jnlp file. Still, I can't seem to get out
of the sandbox.
I have read in this article (http://mindprod.com/jgloss/javawebstart.html)
that direct file system access from a Web Start application is impossible
(Quote: "There is still no way for even a signed JAWS app to
find some persistent disk space in an easy way. It pretty well
has to ask the user for the name of some directory to use.")
Is this true?
Thank you,
Peter

Hi Guys,
I found a way to access the local filesystem...
Besides signing all the jar files and including the<security><allpermissions /></security> tag in the jnlp file I have to include this line in the code I execute on the client machine:
System.setSecurityManager(null);
Regards,
Peter

Similar Messages

Files system - access problem (JSR 75)

Hi All
My cell phone is Nokia 6288, I'm from Israel.
The phone should support JSR 75 (FileConnection and PIM API), and I get it without it.
Probably, my Cell operator decided to remove the built-in support for JSR-75 (which suppose to be there).
I wonder how can I add or restore the java thing for JSR-75 (if is it possible).
or if there is someway to get it back because
I know that Nokia 6288 should include the JSR 75 support.
How can I be sure that it have be removed?
Because many application which need this JSR 75 support
couldn't find files and not work because of that.
Thanks,
Adi

25-Jul-2008 10:33 AM
burekas wrote:
I know there is maybe a special burning which should get it back.
It is not permitted to discuss such operations on this forum.
Was this post helpful? If so, please click on the white "Kudos!" star below. Thank you!

Implement Direct Inward System Access (DISA) in VoIP Environment

Hi,
May i know, is it possible to implement DISA Call in VoIP environment. If yes, how we can make it? Is it some configuration in CE Router at SRST Sites or CE Router at Main Sites? Also can you give me the information how to implement it?
As I understand DISA (Direct Inward System Access) allows someone calling in from outside the telephone switch (PBX) to obtain an "internal" system dialtone and dial calls as if from one of the extensions attached to the telephone switch. Frequently the user calls a number DISA number with invokes the DISA application. The DISA application in turn requires the user to enter his passcode, followed by the pound sign (#). If the passcode is correct, the user will hear dialtone on which a call may be placed.
Please advise me as soonest.
Thanks in advanced
Rgds,
Izazi Zainy

Giving users access to system dial tone via DISA is a security hole on PBX's and VOIP system so be careful how you use it. The following note describes how to use a TCL script and audio prompts to allow a user to call in and authenticate via an account number and PIN before they can dial an internal number. This will allow basic DISA type functions on a H323 gateway. Obviously you would also want to log the details of who made the call and when they made it, so syslog VOIP accounting is enabled to send a CDR to a syslog server.
We use an inbuilt TCL script that is inbuilt in IOS called 'clid_authen_collect'. This script authenticates the call with the ANI (Calling number) and DNIS (Called number) of the incoming call, or if this fails, it then prompts the user to enter an account number and then a PIN number. Since the call is coming in on an FXO (or FXS) port, there is no associated ANI and DNIS, so the script immediately prompts the user for the account number and PIN. We do the authentication by a local 'username XXX password YYY' command in the router config. The user keys in the account code and PIN (can use the # as a string terminator to speed the process up and if the values entered match a local username and password, it then prompts for the user to enter the actual destination telephone number.
I have also enabled syslog accounting for call detail records, so when the call completes you get a basic record of the called number and durations. If they wanted to use a full blown AAA server, they could run the authentication from this and this way keep a full log of all users calling in, and it would also log the CDR's for billing etc ...
The router needs the following audio .AU files on the flash memory :
Test#sh flash
System flash directory:
File Length Name/status
1 14097360 c2600-is-mz.122-11.T.bin
2 14150 enter_account.au
3 14869 auth_fail_retry.au
4 11510 enter_pin.au
5 52644 enter_destination.au
[14190860 bytes used, 2062068 available, 16252928 total]
16384K bytes of processor board System flash (Read/Write)
Test#
(obviously needs the IOS image but the important files are the audio prompts)
The .au files are the audio prompts that the IVR plays. These are in Sun/Next audio 64Kbps G711ulaw audio format. Use an audio editor to create the files and save them in this format.
When a call comes in on FXO port 1/0/0, you will hear a prompt to enter the account code. Key in the account number, followed by a #, then key in the PIN , followed by #. The caller will be prompted to enter the destination phone number, and this is matched on any subsequent voip or pots dial peers.
Configured user account numbers/passwords are 1000/1000 and 1001/1001
Refer to the attachment for the full router configs. Hope this helps.

SAP File System Access - SLD Naming Convention/Suggestions

I would like to access our ECC file system to pick up files we will use to create Idocs.
I'm wondering the best way to describe the file system access in the SLD.
I have a business system for the main client on the ECC system (BS_ED1CLNT010) for example but the OS isn't client specific.    I could use this as the Business System in the scenario and define a file adapter that connects to the unix server.
Any thoughts?

Maybe I didn't frame my question properly.
In the ECC system we have multiple clients (20,30,40, etc). If I am going to post an Idoc to a client in this system I need to define each as a business system in the SLD and import this to the Integration Directory.    So I would have BS_XXXCLNT010, BS_XXXCLNT020, etc, one for each client.   These all share the same Technical System.    If I want to post an Idoc to a client on the ECC system I have to define a Business System and interface to that and every client that will receive an Idoc. (as well as the ALE settings on the ECC)
Each of these reside on the same SAP server (sap00001 for example) and there is a directory (/public for example) on this server.     This isn't client specific.
I wish to pick up a file from the ECC file system and post a client on the ECC system (maybe different ones based on the data in the file).
I don't want to define the file adapter under BS_XXXCLNT020 since it isn't specifc to client 020 although that would work.
Do I create a new TS in the SLD as third party, stand alone java, and a BS for that?    TS_XXX_FILESYSTE (3rd party). BS_XXX_FILESYSTEM for the TS?
I'm really looking for clarity in the definition of the SLD.

Access UME from Webdynpro Application

Access UME from Webdynpro Application u2013 display the user attributes from Webdynpro iview
How to go for this...??
Edited by: saurav mago on Sep 1, 2008 6:45 PM

Hello Saurav,
Try this:
import com.sap.security.api.IUser;
import com.sap.security.api.IUserAccount;
import com.sap.security.api.UMException;
import com.sap.tc.webdynpro.services.sal.um.api.IWDClientUser;
import com.sap.tc.webdynpro.services.sal.um.api.WDClientUser;
import com.sap.tc.webdynpro.services.sal.um.api.WDUMException;
try {
     IWDClientUser wdClientUser = WDClientUser.getCurrentUser();
     IUser sapUser = wdClientUser.getSAPUser();
     if (sapUser != null) {
          java.util.Iterator parentGroups = sapUser.getParentGroups(false);
          while (parentGroups.hasNext()) {
               String parentGroupName = (String) parentGroups.next();
               if (parentGroupName.equals("GRUP.R3_ROLE_DS.Z:EP_XPTO123")) {
                    return true;
catch (WDUMException e) {
     e.printStackTrace();
OBS.: sapUser can be used to access a lot of info regarding the user.
OBS.: you need to add a reference to "com.sap.security.api.sda", that is in the default SC SAP_JEE, if I well remember.
Regards,
Douglas Frankenberger

Whether will falsh player support Unrestricted File System Access in Full Trust ?if it will , when?

    I am doing a software based on Flash , to provide my customer to edit pictures online.
    In some scenario, to get Full Acess Local File is necessary. I find SliverLight 5.0 had supported such features:
Unrestricted File System Access in Full Trust
Full Trust in-browser for enterprise scenarios
Default Filename in SaveFileDialog and OpenFileDialog
   I really desire those features , so , I am wondering whether adobe will support it .If will, when?

Please read the below flash player administrator guide
http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/flashplayer/pdfs/flas h_player_11_7_admin_guide.pdf
check the section "The User FlashPlayerTrust directory". It will help.

How to use the direct bytebuffer in JNI? Accessing JDBC from C application.

I am working on a project to access JDBC Driver within C application. The invocation JNI is used.
To get better performance, I use the preparedStatement for dynamic sql. This need to transfer much parameter data from C to JDBC for PreparedStatement object in JVM. I think this maybe get improvements by using the new direct bytebuffer function from JDK1.4. However I cannot find an example code to get start. Could someone provide some ideas for this?
Currently, I directly call JDBC API in C application through JNI, so there is no java codes. Only c file using JNI call.
My understanding is to use the direct bytebuffer feature, I also need to have java codes to process the JDBC API call and then can share the same memory between Java and C. Please correct me if wrong.
Any input is appreciated.

tzhouxian wrote:
thanks, jschell
I am trying to get the best performance for the solution, using JDBC libs in a C application. So I am considering to use the direct bytebuffer in the solution to pass parameters to JDBC and get result sets from JDBC side.
For your questions,
1. Why don't you just write the database access in C?
You mean to directly call JDBC API in C through JNI, right? My plan is to wrap the JDBC API by java and expose seldom interface to C native code, so reduce the JNI call between C and JAVA. If directly call the JDBC API call from C, the number of JNI call maybe more.
No I mean what I said. In C, no java at all, why don't you write code to access the database?
2. The database access itself is going to be slower than anything that you do in C or java.
Exactly. I just want to find each potential points to get performance improvements for the whole solution. I also did some optimization work for the database call. The goal is to get the best performance from C application to database through JDBC libs.
Then I suggest you profile it.
3. Why don't you use import/export files and the database tools? This is often significantly faster with volume processing.
Sorry, I am not very familar with some functions of JNI. Could you explain, " +Why don't you use import/export files and the database tools+"?
Nothing to do with java, jni nor C.
Major (or perhaps everything that is a real 'database') comes with additional tools. Amounst those tools will be command line tools capable of importing and exporting data from the database. In processing bulk data they will always be faster than anything you can do in JDBC.

File drag and drop from java app to file system - Linux problem

Hi all,
I am developing an application for files archiving, with a graphical user interface. The files are showed in a JList, and I implemented drag and drop feature for it. It works well for Windows platform, but not at all for Linux (Ubuntu).
Under Linux, file export with DND from the archive to file system does not work.
To extract a file with DND, we can't know the target destination folder, so I create a temp file (file extracted from the archive is wrote to OS tmp dir), and the system is expected to handle the DND action.
The temp file is correctly created (original data is well retrieved), but Ubuntu does not want to copy or move it via DND.
I get a system dialog window (while extracting file "test1") :
Error while moving
There was an error getting information about "[tmp/60lp1t7egl/test1]".
Show more details > Operation not supported
(Cancel, Skip all, Skip, Retry)
Can it be a rights problem ?
Any idea ?
Regards,
Biibox

Until the 3rd party image editor developers provide us with the Photos extensions for using their app from within Photo we'll have to export to the Desktop, edit there in the apps and either import the new file into Photos or use it elsewhere.

Ext3fs file system access on Sparc SCSI disk

We've got a requirement to read data from a SCSI disk with an ext3fs file system which will be connected to a SunBlade system. Write capability would be a bonus.
We've found some old (and not working) implementations to allow Solaris to mount and read ext2, but these don't work on Sparc. Things like LTools won't work either, since Solaris won't allow access to a SCSI disk that doesn't have a Solaris label on it.
Does anyone know of any possible solutions to this problem? Any one know of ext3fs for Solaris? Any one know how to access an internal SCSI disk on Sparc that doesn't have a Solaris label on it?
Thanks
Ed

Hmmmmmm........Thanks for the suggestions - have written a test and the results arent good.
Using file filter to "find" the file is just too slow (1.4 secs and i need to do this 4million times for my application).
So I understand why the filter is slow compared to directly naming the file as we have to accept/reject them all, whereas if we know the file we can go straight to it. But this is a nightmare for my app. Looks like Im going to have to think again....
public static void main(String[] args) throws Exception {
    String dir = "/path/files";
    File dirf = new File(dir);
    long l = System.currentTimeMillis();
    File f1 = new File(dirf,"TheRealFile.3253.ser"); // The file in the 30,000 we want
    InputStream i = new FileInputStream(f1);
    System.err.println("--> "+i.read());
    i.close();
    System.err.println("Took: "+(System.currentTimeMillis()-l)+" ms");
    // Test 2
    FileFilter ffx = new FileFilter() {
      public boolean accept(File s) {
        return s.isFile() &&
               s.getName().startsWith("TheRealFile")
               && s.getName().endsWith(".ser");
    l = System.currentTimeMillis();
    File [] f2 = dirf.listFiles(ffx);
    //System.err.println("Found: "+f2[0]);
    InputStream i2 = new FileInputStream(f2[0]);
    System.err.println("--> "+i2.read());
    i2.close();
    System.err.println("Took: "+(System.currentTimeMillis()-l)+" ms");
--> 172
Took: 0 ms
--> 172
Took: 1482 ms

Shared folder access problem in j2ee application

Hi,
We are using SAP Netweaver 04s JAVA system.
In our j2ee application we are trying to access shared resource(file), but ejb is giving exception. Our code is as follows:
File srcDir = new File("\machine_namefolder");
if(!srcDir.exists())
{throw new Exception("directory does not exist", srcSys);
It gives expection "FileNotFoundException".
The same j2ee application is working fine when deployed on IBM Websphere.
We trired to access same shared path from windows, it is also working.
Please help us. Thanks in advance.
--sagar

Hi,
Please follow Shared Folder acess problem in J2ee application.
-Vladimir

Opening a file (viewed as icons) from within application icons too large!

Help! I'm not a newbie LOL.. I don't know when this error happened but apparently I cant just do a command J to get the view options to pop up while in an application. Here's my problem. I can view files as icons prefectly from within finder. I setup the default a long time ago and it is formatted fine. Now when I open a file from any application, for instnace firefox or NeoOffice.. .. all the icons are like 120x120 in size.. annoying. I attempted to use Alt-J to pop up view options, no go.. it appears you can't bring up view options while opening a file as an app, you can only alter view type.. icons/list/etc. Is there a command I can issue in applesrcipt or whatever to popup view options so I can fix this ?
I THINK I know how I foobarred it. I was playing around with preview and I jacked up the icon size so I can see larger images of the home movies I created.
that was when I was running 10.4.x
I've been looking through the knowledge bases, I didn't see anything.
Your help would be appreciated.
Thanls.

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether your problem is caused by third-party system modifications that load automatically at startup or login.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode* and log in to the account with the problem. The instructions provided by Apple are as follows:
Shut down your computer, wait 30 seconds, and then hold down the shift key while pressing the power button.
When you see the gray Apple logo, release the shift key.
If you are prompted to log in, type your password, and then hold down the shift key again as you click Log in.
*Note: If FileVault is enabled under OS X 10.7 or later, or if a firmware password is set, or if the boot volume is a software RAID, you can’t boot in safe mode. Safe mode is much slower to boot and run than normal, and some things won’t work at all, including wireless networking on certain Macs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

What is the minimum file system access needed to run ODI 10.1.3.4.0 client?

Hi ODI discussion folks,
I have a couple of questions from an Oracle partner that I'm trying to find a definitive answer for if possible. The partner is setting up ODI 10.1.3.4.0 for a customer who insists that the absolute minimum amount of access to the file system is granted due to corporate security policies.
I have checked the bundled ODI documentation but couldn't really find anything about file system permissions needed to run the ODI client. I was pointed towards the "Setting Up Security for an Integration Project — What to Consider" document but this does not mention a great deal about how much access to the file system is needed for the ODI client to function.
What the partner is asking is the following:
"1. What are the minimum file/folder permissions needed for the ODI client installation? I'm installing at xxxxx
and their machines have to be locked down as much as possible.
2. Say you have 3 users all wanting to run integrations etc and the Master and Work
repositories have been set up. An admin installs the ODI client but doesn't
create the connection to the Master repository. What are the minimum
file/folder permissions required on the client machine to:
a) create the connection to the repository
b) run any subsequent integrations?"
If anyone can advise on this then that would be much appreciated.
Regards
Craig Huggans
Oracle Hyperion Support
Message was edited by:
user648991

Hi Craig,
How are you?
Let me try to contribute a little....
1) The minimum requirement is for its own installation directory, there is no reason to have access to other directories unless if it is necessary to read files from some other directory at the client
2) Again only to its own install directory. The connection setting is recorded at \bin install directory. After that, all information are recorded at repository, there is no client work.
Be free to contact me by email or phone if you have any new doubt. You can get my email from my profile.
Does it respond your doubts?
Cezar Santos

Image: display from local drive, upload to server file system, and display from server

Hello,
I am using jdev 11.1.2.4.0...
The requirement is that users would like to upload images from their local drive to server drive and they would like display images from server drive later.
We don't want to keep images in database. I am not sure what the solution should be; however, I plan to ....
1. create a table to keep an information of images -- image_id, image_location (server drive), image_filename
2. create a page where users can enter image information and specific filename from a local drive (I think I will use inputFile component) and provide the preview button to display an image on screen before save it. To save data is to save information to the database and copy an image file to the server drive (the destination location for image files is predefined.)
3. create another page where users can browse information from the database and display an image for a selected record by getting from the server.
I need suggestions on...
1. how to display an image on page from the local drive?
2. how to copy a file from a local drive to a server?
3. how to display an image on page from the server drive?
Thank you.
nat

See:
http://tompeez.wordpress.com/2011/11/26/jdev11-1-2-1-0-handling-imagesfiles-in-adf-part-1/
http://tompeez.wordpress.com/2011/11/26/jdev11-1-2-1-0-handling-imagesfiles-in-adf-part-2/
http://tompeez.wordpress.com/2011/12/16/jdev11-1-2-1-0-handling-imagesfiles-in-adf-part-3/
Where Timo saves images to the database, you save it to the file system (examples on how to do this from Java are available plenty if you just Google for it). Similar to Timo you then use the image tag to display images. The difference is that you can directly add the URL from the database table.
The benefit of using a database to host images is that you are not dependent on file server structures though
Frank

Access resource from other application using JAAS

i use JAAS for autenticate and autorizate in my web application, but i need access a resource from the other application , but this application don�t use JAAS.
How can i acces this resource from other application?
i know need send the parameters JSESSIONID, but , always redirecto the login page.
thank you for your help

your signon url is consists of the following url http://server.domain.com:port/site/signon.html
Can you ping server.domain.com from your client?
If you can ping it, then make sure your port is added as a rule in the firewall of the server.
Also make sure that the proxy setting of the client have an exception to server.domain.com.
If you cannot ping it, make sure the server and the client are conneted to the same network and make sure the hosts file on the client reflects the ipaddress and the hostname of the server.
Hakan

Disallow for file system access

Hi All,
I would like to not permit to access to file system, how can i do that with permission object. I saw only examples how to set contraints on location where it can access.
Regards

I'm sorry but i dont understand the problem. (Maybe someone else will)
So you have told me that when you pass null to an file permission object, that you find out the mask is "NONE"?
You want to stop users accessing some files?
You need to build code that will stop the user accessing certain files
You want to know if you can put restrictions on the whole VM(What is VM?) or just the context?
I believe this Link could be helpful for you.

Direct File System access problems from JAWS application

Similar Messages

Maybe you are looking for