Exception for file access

Hi,
We have a text file in unix box and its permission is -rw-r-----.
And a java web application is not able to read this file and for
some other reason we are not able to see the server console output
for exception stacktrace.
Is the permisson of the file not allowing the application to read it?
If its true then what could be the exception (IOException ??)
-V

If the process is not running under the same user that own the file he won't be able to write, and, if the process is not running under the same user or group, he won't be able to read it.
The Exception will be probably be "FileNotFoundException: Permission Denied"

Similar Messages

Signing Midlet to be Trusted for File access

Hello,
Kindly provide answers to following questions.
1. My midlet has lot of file operations with FileConnection. When I install this application on the phone P990i, it prompts every time for user as "Midelet is going to access the file YES/NO". I would like remove this behaviour. As Midlet should not ask myself anytime if it wanted to access the File. How to do this ?
2. To sign Midlet as trusted do I really need to have certificates from Verisign? because I need to just test application on device.
thanx
Sachin Khaire

In the POC we are trying, a Service impersonates a user in order to be able to access a file on file system.
The POC is from link http://code.msdn.microsoft.com/windowsdesktop/CppWindowsService-cacf4948.
We have been trying constrained delegation as per the link http://msdn.microsoft.com/en-us/library/ff649317.aspx
We were able to achieve impersonation if the service is trusted for delegation in the domain controller and the service runs under “Local System” account. Trying to run the service as WinAD user isn't
able to impersonate.
We have followed thesteps mentioned in the link https://technet.microsoft.com/en-us/library/cc757194%28v=ws.10%29.aspx.
Some of the things we came across about the configuration are:
The Domain Functional level to be more than Windows Server 2003
http://technet.microsoft.com/en-us/library/cc753104.aspx. Also
https://technet.microsoft.com/en-us/library/ee675779.aspx
Providing SeTcbPrivilege
To set SPN
http://technet.microsoft.com/en-us/library/cc731241%28WS.10%29.aspx
Making the user part of Pre
Windows 2000 Compatible http://support.microsoft.com/kb/325363
The mentioned POC works if service runs under “Local System” account. Trying to run the service as WinAD user isn't able to impersonate.
So we need to know what we are missing due to which WinAD user is not able to impersonate?

Setting Oracle Permissions for file access from a pl/sql function

I have a pl/sql function that calls a java method which moves a
file from a directory to another.
Since we are using Linux, Oracle wants some permissions.
Those permissions are set using:
call dbms_java.grant_permission(USER, 'java.io.FilePermission',
FILE, permission)
OK, i want to use this in my pl/sql function, but it doesn't
work.
My function looks like something like this:
-- some pl/sql code
dbms_java.grant_permission(someUSER, 'java.io.FilePermission',
sourceFILE, 'write');
dbms_java.grant_permission(someUSER, 'java.io.FilePermission',
destFILE, 'write');
flag := move(sourceFILE, destFILE);
-- flag is for 1 -> done and 0 -> error
-- some more code ...
The problem is the lines of
dbms_java.grant_permission(someUSER, 'java.io.FilePermission',
sourceFILE, 'write');
do not work!
When i grant permissions manually in sql plus it works great,
but when i do it from the function it does not work!
Any ideas anyone?
Any help would be appreciated.

The command :
dbms_java.grant_permission
(someUSER, 'java.io.FilePermission',sourceFILE, 'write');
is right.
Open sqlplus
Connect as sys or system
type :
execute dbms_java.grant_permission
(someUSER, 'java.io.FilePermission',sourceFILE, 'write');
commit;
try to compile again your procedure...does it work now ?
bye
Giovanni Regola

Looking for file " accessibility.css "

When one looks at the following page : http://www.apple.com/accessibility/vision/ about half way down is a section labeled "Safari Cascading Stylesheets (CSS)" and within that section is a hint and an image of Safari using a custom, supposedly available .css file called accessibility.css . Anyone know where and how to get a copy of that file to work with?
TIA / z

It's marketing. They're giving you a screenshot of what's possible. Nobody at Apple has any idea what your particular handicap is or what you would want in your CSS file. A color blind person isn't going to benefit from jumbo 96pt type nor is a person with macular degeneration going to benefit from a subtle hue change.

InputStreamReader for file access ?

I was wondering if it's possible to use an inputStreamReader instead of a fileReader to access a file in an applet to populate a List with the files contents? I don't believe that i can do this with fileReader without signing my applet(which i've never done before)......?

what abt this one
FileInputStream fin = new FileInputStream(fileName);
BufferedReader myInput = new BufferedReader
(new InputStreamReader(fin));
while ((thisLine = myInput.readLine()) != null)
blah blah
hope to help.
abdul

Storing pairs of files that are identical except for file type

I want to store Word 2010 docx and PDF versions of the same document in SharePoint Online. The Word version should only be visible to members of the engineering department. The PDF version should be visible to everyone in the business. Apart from file type,
all other parameters people would use to organise the files (product name, product series, model number) are the same between the Word and PDF versions of each pair. When I update the Word version, the PDF would be replaced with a PDF of the updated Word file
(maybe automatically, maybe manually).
Is this best implemented as two separate libraries or as one library with something like a view to control who can see the Word files? Or is there some still better way to implement management of pairs of files like these?
This might sound like a basic question, but I am a SharePoint novice and I've not been able to find guidance on this online (maybe I have been searching with the wrong keywords?).

... the dng converter wont convert a jpeg to dng only camera raw files...
Didn't know about that.
In this case, you can use Lightroom to convert to DNG:
Start a fresh catalog.
Import all your JPEGs.
Use the Convert to DNG command in Library module to convert all JPEGs at once. It will place the new DNGs in the same catalog as the source JPEGs.
Open the original catalog where the DNGs are missing — the old catalog should be fine finding the newly created DNGs now.
You can now trash the "new" catalog.

My iPad 2 won't react to any touch, except for the accessibility button.

MY iPad 2, using the software of IOS 8 something, won't react to my touch. I can't even restart it. I was updating 4 apps at once. The only thing I could press is the accessibility button. Also, after updating to IOS 8,there is a strip of screen in the middle of my iPad that won't react to my touch. Now the whole screen won't.

iOS Reset -
Try a reset. Press & hold the Power and Home buttons simultaneously, ignoring the red power off slider, until the Apple logo appears. Then release both buttons. This should not affect any content on the device, it is similar to rebooting your computer.

Exception for unauthorized access

If an ejb method is protected by an authorization (role), what is the Exception thrown by the container if I call the method and I have no authorization to do it ?

I've checked it during the night and u're right.
java.lang.SecurityException

LAN side firewall settings for Direct Access (Windows Server 2012 R2) in DMZ?

I am currently planning to set up our first Direct Access server (Windows Server 2012 R2). I will be in our firewall DMZ and we will be using the IP-HTTPS listener.
For the Internet facing rule only TCP 443 inbound/outbound is sufficient but for the LAN facing rules (not talking about the Windows server firewall) what would be the recommended firewall rules for a Direct Access server? Is there a best practice guideline
to follow for this? Appreciate any advice or comments. Thank you.

Hi Barkley
Please see this Technet Link which will backup your requirements - https://technet.microsoft.com/en-gb/library/jj574101.aspx
Section Reads -
When using additional firewalls, apply the following internal network firewall exceptions for Remote Access traffic:
ISATAP—Protocol 41 inbound and outbound
TCP/UDP for all IPv4/IPv6 traffic
Also another link from http://www.ironnetworks.com/blog/directaccess-network-deployment-scenarios#.VO3tfvmsVrU
"I have had a number of conversations with security administrators and network architects who have expressed a desire to place the DirectAccess server between two firewalls (firewall sandwich) in order to explicitly control access from the DirectAccess
server to the internal corporate network. While at first this may sound like a sensible solution, it is often quite problematic and, in my opinion, does little to improve the overall security of the solution. Restricting network access from the DirectAccess
server to the internal LAN requires so many ports to be opened on the inside firewall that the benefit of having the firewall is greatly diminished. Placing the DirectAccess server’s internal network interface on the LAN unrestricted is the best configuration
in terms of supportability and provides the best user experience."
Kindest Regards
John Davies
Thank for your reply and information John. I find it somewhat disappointing that Microsoft does not provide much more in the way of documentation and information regarding this topic. I required more information to show to our security team so they will allow
us to have the internal facing NIC not have more restrictive rules in place as it is a security concern.

Safe Protection of file access by all means

Hello,
we currently in an implementation project we we get delivered sensitive denormalised data from special ledger.
Denormalised means in this case that we post transaction data and master data attributes in one file.
This is done due to technical reasons. For example if you have 1 million transaction data and 1 million master data
we speak about one trillion reads, which will be tear down performance in any case.
On development and test system we are currenlty in middle to get an anonymizatin solution on board.
For produtive enviroment we have to access the files via ABAP in order to validate them.
In SU21 (Overview authorisation objects) I found the authorisation object S_DATASET (see attachment)
which seem on a first sight suitable, but it the authorisation object have to by a ABAP programm over the function module AUTHORITY_CHECK_DATASET, which means every developer can develop an ABAP programm without the function module by accident or without. In both cases it means unlimeted access the files.
I'm looking for a more kernel based authorisation for file access.
Additionally it should be common sense to restrict to transactin AL11.
+ How can we protect the files in our productive enviroment by all means?
+ Are other threats beside ABAP programms for the files in our scenario?
We are on BW 7.0 SP23 / Basis 7.00 SP21 and ABAP 7.00 SP21. We are running on OS SunOS.
Regards & Thanks,
Guido Brune
Documentation on S_DATASET:
Definition
Authorizations for accessing files from ABAP/4 programs.
You use this object to assign authorizations for accessing operating system files (with the ABAP/4 key word OPEN DATASET, READ DATASET, TRANSFER and DELETE). This key word can also be used to assign the authorization for using operating system commands as a file filter.
In ABAP/4 programs, you perform the authorization check with the function module AUTHORITY_CHECK_DATASET.
Defined fields
The object consists of the following fields:
ABAP/4 program name: Name of the ABAP/4 program that contains the access. You can restrict the file access to a few known access programs.
Activity: Possible values:
33: Normal file read
34: Normal file write or deletion
A6: Read file with filter (operating system command)
A7: Write to a file with filter (operating system command)
File name: Name of the operating system file. Here, you can restrict the accessible files.

I think securiing the file path using SPTH table and S_PATH authorization object still make sense as an additional level of security check. Not sure if I am complicating things but seems to me these basic steps needs to be taken care of -
1. OP should find the file path where sensitive data would reside ..for example say /tmp/sensitive_files
2. Update table SPTH with this path and SAVEFLAG as X and FSBRGRU as the authorization group named for these files.
3. Make sure t-codes that can update tables are restriced in Production such as SM30 / SE16 / SE17 so that nobody can
    change this table. Again restricting S_TABU_DIS as well.
4. Controlling the programs that have ability to read and write to these sensitive files by using S_DATASET object by updating the
    field for program name and file path for the sensitive files in this object.
5. Giving access to S_PATH and S_DATASET to users who really need to have access to this file path and programs that can access these files.
S_PATH will help because suppose some previous security administrator has given S_DATASET object in any role with Wild card access but without S_PATH they still will not be able to update the file.
> "What happens when the program lets the user define the directory path for the inbound file, and another lets the user define the directory path for reading the dataset?"
>
The following setting restrict ABAP programs to access any files on the application server apart from those in the path u2018(/tmpu2019).
PATH       SAVEFLAG         FS_NOREAD      FS_NOWRITE     FSBRGRU
        *       BLANK              X                                  X                              BLANK
       /tmp       BLANK          BLANK             BLANK                                BLANK
So technically you can control paths which can be accessed by the ABAP programs.
Edited by: Nishant Sourabh on Sep 13, 2010 10:48 PM
Edited by: Nishant Sourabh on Sep 13, 2010 10:50 PM

I have not accessed my iBooks for a month. When I opened the application a while ago I found that all my books except for 2books have disappeared. What happened and how can I retrieve my books?

I have not accessed my iBook library for a month. When I opened the application awhile ago I found that all my books except for 2 books have disappeared. What happened and how can I retrieve my books.
Charles

One possible reason is have you synced to your computer's iTunes recently ? If so then it might have replaced the books that were on your iPad with those that are on your computer's iTunes library.
You should be able to re-download them via the Purchased tab in the ibookstore in the iBooks app, or via the Purchased link under Quick Links on the right-hand side of the iTunes store home page on your computer's iTunes and then sync them back to the iPad : re-downloading. If you re-download them directly on your iPad then you may want to copy them to your computer's iTunes via File > Transfer Purchases, so that you have a backup copy of them and to see if it stops them disappearing from the iPad again when you sync (assuming that was the reason why they disappeard).

I loaded Mac OS X v10.7 Lion yesterday. Everything's running fine, except for a simple problem. Any time I want to copy a file, JPEG, etc., I am prompted "Finder wants to make changes. Type your password to allow this." I don't want this!! Is there a way

I loaded Mac OS X v10.7 Lion yesterday. Everything’s running fine, except for a simple problem. Any time I want to copy a file, JPEG, etc., I am prompted “Finder wants to make changes. Type your password to allow this.” I don’t want this!! Is there a way to unlock “Finder” or rid this process?

Back up all data.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. You can demote it back to standard status when this step has been completed.
Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -R $UID:20 ~ $_ ; chmod -R -N ~ $_ 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. If you don’t have a login password, you’ll need to set one before you can run the command.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2
Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
resetpassword
That's one word, all lower case, with no spaces. Then press return. A Reset Password window will open. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
 ▹ Restart
from the menu bar.

I recently saved a draft email using mail, but now whenever I try to reopen it, it says loading but will not load. All my other drafts load fine except for this one. Is there a way to access the draft outside of mail?

I recently saved a draft email using mail, but now whenever I try to reopen it, it says loading but will not load. All my other drafts load fine except for this one. Is there a way to access the draft outside of mail?

Create a new profile as a test to check if your current profile is causing the problems. <br>
See '''Creating a profile''':
*https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
If the new profile works then you can transfer files from a previously used profile to the new profile, but be cautious not to copy corrupted files to avoid carrying over the problem <br>
'''Profile Backup and Restore'''
*http://kb.mozillazine.org/Profile_backup
*https://support.mozilla.org/en-US/kb/back-and-restore-information-firefox-profiles
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

How can I add more chosen websites for quick access in the remaining empty fields in "file"-"new tab"? ing empty fields

I can´t add preferred, chosen, most visited or bookmarked websites to the 28,15 or 6fields in"file" - "new tab". I have a PC with Windows Vista and have been using Firefox with additional Google toolbar as my preferred or default browser for several years. I have downloaded several updates. I suspect that my version is now 4 or 5. Originally the Google for Firefox new tab feature showing chosen favourite or preferred websites for quick one click access worked fine but I seem to have lost the abiiity or forgotten how to add new such favourites for quick access. The "edit" button there on the bottom left can only delete valuable chosen sites, which then seem to the be lost forever. This edit button is very dangerous! The "bookmarks" and "most visited" tabs listed show a wild coincidental mixture of sites I once visited sometime but have nothing to do with my real favourites or chosen or most visited sites. So I don´t use these bookmark or "most visited" features.

Most visited would not be your bookmarks, but your tab history.
You can check that out via Ctrl+Shift+H then search on ":" (colon without the quotes). Sort on the "Visits Count" (descending) and you will see that they agree.
'''Most visited''' is one of the '''smart bookmark folders''' which are database queries.
'''More information:'''
* [https://developer.mozilla.org/en/Places_query_uris Places query URIs - MDC Docs]
* [https://support.mozilla.com/kb/Smart+Bookmarks+folders Smart Bookmarks folders | How to | Firefox Help]
* [https://support.mozilla.com/kb/Restore+the+default+Smart+Bookmarks+Folders Restore the default Smart Bookmarks Folders | Troubleshooting | Firefox Help]
'''Related information:'''
* [http://kb.mozillazine.org/Viewing_the_browsing_history_-_Firefox Viewing the browsing history - Firefox - MozillaZine Knowledge Base]
* [https://support.mozilla.com/hu/questions/830859 When I search in "History" for items I've called up, I get a page with the heading "Library." but with no text beneath it. Thanks.]
Google Toolbar is no longer supported in Firefox 5 or newer versions.<br>http://kb.mozillazine.org/Using_Google_Toolbar_features_without_toolbars

I have multiple devices with the same cerificate, once I have a an exception for one, FF denys access to the others. I cannot change the certificates, I need to stop FF blocking them.

I have multiple devices with the same cerificate, once I have an exception for one, FF denys access to the others. I cannot change the certificates, I need to stop FF blocking them.
== This happened ==
Every time Firefox opened
== I attempt to access a web front end on an IBM SVC device

You can't use the same certificate more than once.
See also [[Certificate contains the same serial number as another certificate]]

Exception for file access

Similar Messages

Maybe you are looking for