File permission issue when indexing from JSP

Question

HI
I have a class that I intend to use both in batch file and in JSP that will build a search index (Lucene) somwhere in the file system outside the web root. The class works great when called from the batch script but when I try to use it in the JSP page i get this error:
[#|2004-04-23T09:56:41.155-0400|INFO|sun-appserver-pe8.0|javax.enterprise.system.stream.out|_ThreadID=13;|
caught a class java.security.AccessControlException
with message: access denied (java.io.FilePermission C:\AMIR\nemours_internet\common\search_index\html\segments delete)|#]
Can someone tell me if this is a setting in PE8 server or do I have to do something within my class code?
Thanks
Following is my class (BuildPageIndex.java) and the snippet of the JSP file where I call it...
<<<< package and imports ommited >>>>
public class BuildPageIndex {
     private StringBuffer sbOut;
     public BuildPageIndex(){
     public BuildPageIndex(String pathToCMTXML){
     CMTController.loadCMTXML(pathToCMTXML);     
     public void buildIndex(){
          try {
          sbOut = new StringBuffer();
     // get all the page objects from the database
     ArrayList pageList = CMTPersister.getInstance().getAllPages();
     if (pageList.size() == 0)
          sbOut.append("<Lucene> No HTML pages in the database...Exiting...\n");
          return;     
     // obtain index location from XML config file
     HashMap searchMap = CMTController.getInstance().getSearchConfig();
     String strIndexLoc = (String)searchMap.get("LOCATION");
     sbOut.append("\n\n\n");
     // if backup management fails abort index creation
     if (!(manageBackup(strIndexLoc)))
                    return;
     // create index and start timing
     sbOut.append("<Lucene> Creating index for HTML pages in: "+ strIndexLoc + "\n");
     Date start = new Date();
     IndexWriter ixdBuilder = new IndexWriter(strIndexLoc, new StandardAnalyzer(), true);
     //for all pages ...
     for (int i=0;i<pageList.size();i++)
                    //get a page
                    Page thisPage = (Page)pageList.get(i);
                    // create lucene document from a page
                    sbOut.append("<Lucene> Page [" + thisPage.getURL().trim() +"] added \n");
                    Document pg_doc = PageDocument.Document(thisPage);
                    // add page document to the index...
                    ixdBuilder.addDocument(pg_doc);     
     // optimize and close index
               ixdBuilder.optimize();
               ixdBuilder.close();
     // calculate the time it took to build index
     Date end = new Date();
     long msecs = end.getTime() - start.getTime();
     sbOut.append("<Lucene> HTML Index created in: " + msecs + " milliseconds ("+ (float)msecs/1000.00 + " seconds) on "+pageList.size()+" pages\n\n");
     } catch (Exception e) {
               System.out.println(" caught a " + e.getClass() + "\n with message: " + e.getMessage());
     public String getOutput(){
          return this.sbOut.toString();
     private boolean manageBackup(String loc){
boolean retVal = true;
          //rename the location to _BACKUP so we have it
File currIdx = new File(loc);
File backIdx = new File(loc+"_BACKUP");
if (currIdx.exists()){
     sbOut.append("<Lucene> Index directory allready exists!\n<Lucene> Backing it up to ["+backIdx.getPath()+"]...\n");
     if (backIdx.exists()){
          sbOut.append("<Lucene> Backup directory also exists! Will delete it first...\n");
          if (!(Utils.deleteDirRecursive(backIdx))){
               sbOut.append("<Lucene> Failed deleting backup directory! Aborting...\n");
               retVal = false;
     if (!(currIdx.renameTo(backIdx)))
          sbOut.append("<Lucene> Problem backing up existing index! Aborting...\n");
          retVal = false;
return retVal;
     * Class has a main so it can be run from the batch file
     * or a command line
     * @param args
     public static void main(String[] args) {
          if (args.length == 0) {
               System.err.println("Usage: BuildPageIndex <path_to_cmt.xml_file>");
               System.exit(0);
          BuildPageIndex bpi = new BuildPageIndex(args[0]);
          bpi.buildIndex();
          System.out.println(bpi.getOutput());
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
JSP snippet
+++++++++++++++++++++++++++++++++++++++++++++
<%
     BuildPageIndex bpi = new BuildPageIndex();
     bpi.buildIndex();
     String results = bpi.getOutput();
%>
     <%=results%>

Answer 1

Hi Zambak,
It looks like you might need to give your JSP permission to delete the file that it is complaining about. One way to do this would be to add a FilePermission to the server's security policy file (located at <PE install dir>/domains/domain1/config/server.policy. Adding the following would grant file delete permissions to all files for all codebases...
grant{
permission java.io.FilePermission "<<ALL FILES>>", "delete";
After modifying the policy file, you will need to restart the domain by executing the following...
<PE install dir>/bin/asadmin stop-domain
<PE install dir>/bin/asadmin start-domain
It is also possible to further restrict permissions to certain codebases or further open the set of file permissions (adding write, read, delete for example). For more information on how to do this, please refer to the J2SE security documentation loacted at http://java.sun.com/j2se/1.4.2/docs/guide/security/permissions.html .