File Permissions in windows XP

ok im alittle stumped on this
i need to give my application read\write access to %USERPROFILE%\\savedir
now if i put it fully qualified
i.e.
permission java.io.FilePermission "C:\\Documents andSettings\\zaelld\\.saveDir", "read, write";
it works fine
by
permission java.io.FilePermission "%USERPROFILE%\\.saveDir", "read, write";
that should work as ide assume $HOME/.saveDir in linux would work fine(i havent tested that yet)
and i ONLY want the program to have access to .saveDir
any ideas? or have a missed something obvious:?

well then i should have read the file permissions tutorial more carefully
permission java.io.FilePermission "${user.home}\\.saveDir", "read, write";
fixed

Similar Messages

How to edit NTFS file permissions in Windows PE 3.0

Does anyone know how to edit NTFS file permissions from Windows PE 3.0?

Hello,
The Windows Desktop Perfmon and Diagnostic tools forum is to discuss performance monitor (perfmon), resource monitor (resmon), and task manager, focusing on HOW-TO, Errors/Problems, and usage scenarios.
Since your post is off-topic, I am moving it to the
off topic forum.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book:
Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C406F75746C6F6F6B2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Problem with file permissions in Windows shares

Due to a company merger we are now supporting a group of Macs in our PC environment. These Macs connect to our Windows shares. This generally works well, however we have discovered a problem. It’s to do with the way our Macs interact with our Windows shares. When they copy a file to a windows share they take the permissions for the file they copy from the route of the share rather than from the subfolder the files are copied to and write the file permissions accordingly.
This only affects admin users who use Macs with the ability to change file permissions. Everyone else inherits the permissions from the subfolder as they should because their account can’t change the permissions. If the route and subfolder permissions are the same then there is no change. If they are different, the Mac will use the share route permissions as preference.
We have shares where users don’t have access to the route folder but do have access to other folders. This is so that they can’t change the top level folder structure. However they are able to create folders and files under the top level folders. If an administrator uses a Mac, no one has access to any files or folders they create because users don’t have access to the route folder and this is copied to the files and folders they create. This doesn’t affect our PC’s only the Macs.
We are using the latest Mac OS fully updated and Windows 2008 server. Is this a normal Mac ‘Feature’? Is there a work around?

I’m a bit disappointed by the lack of response to my problem. As Windows is the predominant file server in business, this problem must have occurred before.
Are Mac people really saying that Macs are not designed to connect to networks? At the moment our Macs are unusable apart from a few isolated tasks. Basically they are used by a few designers who work in isolation. If PC’s had this problem no one would buy them.

Problem Assigning file permissions on windows client

I have created some Users and Groups in the OD. I have several Windows PC's including Server 2003 installations. SMB is running and configured as "primary domain controller".
When I browse the OD from the Windows client to assign file permissions I ONLY see the USERS, not the Groups. I have Groups and Users checked in the "Locations" sub dialog.
ie. Right Click on folder to share, choose Sharing and Security, choose Permissions, choose Add, choose Advanced, choose Find. Same thing in the Security Tab. Same thing in the User manager.
This also affects the logons. I don't want to have to add each user every time I want to share or give logon permissions on the Windows client. Adding a Group is much easier.
Any suggestions?

N'<national symbols>', being part of an SQL statement, will be converted to the database character set (WE8ISO8859P1) before being parsed. Only if the client and the database are both 10.2 or higher, the client can encode the literal appropriately so that it survives this conversion.
In earlier versions, you can do the encoding yourself. Instead of the N'<national symbols>' literal use the UNISTR function: UNISTR('\xxxx\yyyy\zzzz'), where U+xxxx, U+yyyy, U+zzzz are Unicode code points of your national characters.
-- Sergiusz

Fix downloaded files permissions on Windows 7

Almost every time I download a file from various sources, Firefox adds a padlock to the downloaded file icon. This means that the file can only be accessed by the current user unless I change back the file permissions manually.
Is there any way of stop the downloads from changing their file permissions? I've only noticed this happening for a week or so, currently I'm on Firefox beta 26.0

You can try to set the browser.download.manager.scanWhenDone pref to false on the <b>about:config</b> page to prevent Firefox from adding zone identifier data to the downloaded files.
See:
*http://kb.mozillazine.org/Unable_to_save_or_download_files

Java.IO File permissions on windows

Hey Guys,
I have a single box running Windows and Oracle 10gR2. I need to read a file from the file system on the same box. Except I'm getting the following error
general excecption:the Permission (java.io.FilePermission D:\XX_FOLDER\file.pdf read) has not been granted to ATSYS. The PL/SQL
to grant this is dbms_java.grant_permission( 'ATSYS', 'SYS:java.io.FilePermission', 'D:\XX_FOLDER\file.pdf', 'read' ) After trying what is suggested, I still get the same error, Does anyone have ideas why?
Thanks in advance
Kris

Kris,
please be sure to verify all your steps by reading the chapter Security for Oracle Database Java Applications in the Java Developer's Guide of the DB documentation (http://download-uk.oracle.com/docs/cd/B19306_01/java.102/b14187/chnine.htm#BABFBDGG)
It also worth to note that all user names must be written in UPPER CASE since there is a difference between lower and UPPER case in Java.
--olaf

Installed Photoshop cc 2014 asks for serial # - corrupted Windows file permissions

More of a warning / heads up to all than a question - installing Photoshop cc 2014 [via the CC manager app] caused some Windows file (security) permissions to become corrupt corrupt on my system. Symptoms include cc2014 asking for serial number validation on startup (when, as a cloud version, it should not do so), then being unable to connect to the internet when you press the 'validate serial' button so getting that window into infinite loops, and - a real pain in the *** when trying to fix the above - causing abends of some windows shell functions that in turn cause windows explorer to crash and restart.
Anyhow, digging into this (fortunately, I am a long time Windows SysProg) I discovered that for reasons unknown, either the CC master app or the actual Photoshop cc2014 installer (or both) are changing file access control permissions on a number of files, mostly DLL's. Most of the files affected are in the (normally hidden) Program Data directory on the windows root disk, Some of them are in the Adobe subdirectory - so fair enough if they want to fool around with their own program - but others being changed are in the Common Files and Microsoft subdirectories. I cannot for the life of me figure out why this is necessary nor why Adobe feel the need to touch files that 'do not belong' to them - something dangerous in the extreme as an external app such as Windows Update might replace or 'repair' the files so touched, and if Adobe / CC are relying on file permissions on non-Adobe files, such changes could result in all manner of random and spurious problems / error messages occurring.
Anyhow, if, fellow Photoshop cc 2014 user, you get this happen to you then you can fix the file permissions by opening a console window [also called a "DOS box", or "command prompt" depending on your age and knowledge... 8-) ] and run the windows file checker with the command
"sfc /scannow". Make sure that you use 'run as administrator' to open the console window, or you'll get an error about sfc only being available to administrators. Also a very (very) sensible idea to close all non-essential running applications first to prevent any possibility of weird interactions happening.
Finally, check that the 'hosts' file in [root drive]:/Windows/System32/drivers/etc is valid - for some reason, it looks like the install tried to check or update this file (again, I have no idea why) but the result was a corrupted hosts file, which I assume is the root cause of the 'unable to connect to host' type internet error messages. Copy the file, rename it as 'hosts.txt' and edit it with notepad or wordpad. Look for lines containing garbage strings at the bottom of the file (any line that starts with a # ignore, it is a comment, and any line that has IP addresses or host names should be ignored - though if they reference a site such as "someserver.adobe.com" you might want to treat them with suspicion if you continue to get internet 'cant connect to site' type errors.
Anyhow, when I fixed these two sets of problems, Photoshop cc 2014 started 'right first time' without all the BS messages about serial numbers etc.
Hope this helps somebody out there in AdobeLand......
Rick

Update: I tried several times to reproduce the error, actually it dosen't occur. I changed nothing on my system, without reboot it twice. This is what I said in my beginning times: it occurs sometimes but often. I will keep you up to date.

Windows file permissions problems

We have an Xserve G5 that was running Server 10.3. I upgraded it directly to Server 10.5. Since then, I am having problems with some of our Windows users.
When they create a new folder, it puts them as the owner, but gives them NO rights. I am using ACLs to give full rights to the group that needs access, and also setting the POSIX group rights to read/write. So once they leave that folder, they can no longer get back in. I have SMB set to inherit rights from the parent, and the ACL is set to inherit as well. Other people in the group can access the folder, just not the owner! I change the owner permissions and all is well (for that folder at least). How do I need to set SMB so it follows the inheritance I set?
Once I have the folder set correctly, any new files created there have the POSIX group set to read only. The ACL inherits properly and still has full control. The owner is set correctly, usually. It is not consistent.
Once someone creates a file in any folder, if a Windows user modifies a file someone else created, it changes the owner name and gives them no rights. It also creates a new ACL record. If the original owner was a Mac user, it creates a new explicit ACL with all rights except execute and delete. If the file has ACL records already, it duplicates them and gives whatever rights it feels like (it seems). One new record may say Allow Delete only, and the next one say Allow Read except for execute. The only thing for certain is it will never match the original ACL. It always adds the new ACLs at the top of the list, and the duplicates are grayed out as if they were actually inherited that way. The most 'popular' file I've found so far had 128 "inherited" ACL records!
It is also denying access to some folders that the user has the correct permissions for. For instance, I can create/modify/delete files logged in on the Mac side, but when I log in on Windows, I have problems accessing files/folders. It shows everything as read only. Even if I change the properties in Windows, it will revert back to read-only when I apply the change.
We have a new Xserve that we will be moving the file services to. At that time, all the Windows users will be moved completely to the Mac side - currently the Windows users are accessing the Xserve and a Novell server.
Thanks in advance for any help.

Hi Thy,
Based on my research, the Trusted Installer is a service, for those resources which only allow Trusted Installer to modify, neither Administrator nor System can modify them.
I am wondering that how secure the network and physical environment is that you need to create a GPO to prevent users making permissions changes on system files. These system files normally only can be modified by Administrators,
System or Trusted Installer, which is secure enough when we don’t add users we don’t trust enough to Administrators group.
>What is the best way to undo this while leaving the audit failures turned on and still retaining the correct permissions on all the files?
As long as administrators on these machines are qualified, you can remove the Group Policy. If not, please don’t make any user you don’t trust as Administrator.
>What happens to the files that aren't owned trustedinstalled than now have the trustedinstaller default permissions under system32 and syswow64 if I were to remove the gpo? What file permissions would be retained?
We should keep the default permissions, if those files weren’t owned by Trusted Installer before, we should change the original owner back, vice versa.
Here are some related articles below I suggest you refer to:
New ACLs Improve Security in Windows Vista
http://technet.microsoft.com/en-us/magazine/2007.06.acl.aspx
SYSK 277: How-To Bring Back the TrustedInstaller
http://blogs.msdn.com/b/irenak/archive/2007/01/30/sysk-277-how-to-bring-back-the-trustedinstaller.aspx
Best Regards,
Amy

Windows 7 ignores file permissions for shared 10.5.8 folder

I set up a shared folder on my Mac using SMB. I also set up an account with limited privileges (read only) for accessing it. The problem is that, while the Windows 7 computer needs the account password to access the folder, once it's accessed the file permissions are completely ignored, permitting to user to change and delete files at will.
Any ideas on how to keep the folder Read-Only?

When you enter the account's password, you are logging in to the Mac as that user, which is why everything is coming up as read + write.
This article indicates that you have to provide the account name and password for SMB sharing:
http://docs.info.apple.com/article.html?path=Mac/10.5/en/8201.html
There's a special forum for Windows compatibility; you might want to search and/or post in there:
http://discussions.apple.com/forum.jspa?forumID=687

How to set permissions for files created by Windows on OS 10.8 volume

I am in process of upgrading from an iMac with OS 10.6 to an iMac with OS 10.8. In my office network, I store all files on my iMac and let the Windows PCs act as workstations to read/write onto the Mac. (It's simpler to have all files centralized in one location, and only have to be concerned about backing up one volume.)
When I had OS 10.4 and OS 10.6 any newly created file saved by the Windows PCs onto the Mac could be opened by the Mac.
But with OS 10.8, I can not open newly created files from Windows. The file permissions for the newly created files from the Windows PCs are:
PCUser = read/write; Everyone = no access.
What do I need to do so that newly created files from the Windows PC (currently Windows 7) can be opened by the Mac, without having to use Get Info to reset the permissions each time?

You could try adding this Access Control Entry (ACE) to the folders you let them save to:
sudo chmod -R +a "accountinggroup allow delete,chown,list,search,add_file,add_subdirectory,delete_child,file_inherit,directory_inherit" /Path/to/topmost/folder
You first need to create a group for all the sharing people you want to have access to that folder, if you don't already have one. In the example, "accountinggroup" is the group, so change that to whatever you want to use.
The ACE allows them full access to the files in the folders. If you want to limit that, remove the option (such as delete).
You create Groups in Users & Groups System Preference just like creating a new user. Just change the account type to Group.
If you want a GUI to do the settings, try Sandbox. It's got a few glitches in the Interface, but it seems to write the ACL correctly. One glitch is selecting the Group or User. I had just a list of Continuing in the popup menu. I typed in the Group name I wanted and it worked. Some errors pop up as you traverse the file hierarchy, but you can dismiss them.
Here is an old hint, which gives a little background, and some other options: http://hints.macworld.com/article.php?story=20090219133314985
The Server tools would allow you to set this up more easily, but if this is all you need as the server, I don't know if it is worth it.

Permissions for file sharing to Windows users

Greetings, I would be very pleased if someone could help me with file sharing permissions for Windows users of a Mac mini file server running Snow Leopard 10.6.1 (not server).
I have a folder in my root directory, lets call it Project, that holds a series of 10 sub folders, say 1 through 10. Some of my users I wish to have read/write access to the whole Project directory, and, having enabled file sharing in System Preferences (and SMB for Windows), I did cmd to get info on the Project folder, ticked sharing, added the users (whose user accounts I had replicated on the Mac from their Windows machines), gave them read/write access, and then was able to map a drive to Project in their machines. All good so far, notwithstanding an hour tussle with a Vista laptop . The other user 'groups' were set the following permissions: me - read/write; Admin - read/write; Everyone - no access; which seemed sensible.
Then, when I wanted to only share say sub folders 4, 5 and 6 with other users, who will not have access to the whole Project directory, things were not as straight forward. I followed the same procedure as above, but for the particular sub folders. However, I think they are only able to see them if I provide read or read/write access for Everyone to the parent Project directory. This of course then lets them at least see all the other folders I do not want to share with them. I don't seem to be able to remove the Everyone group from the Project directory, which occurred to me might resolve this.
Any thoughts? Thanks.

"On the way down, it seems to me that you still can prevent that user from using folders that he or she is not supposed to use by setting appropriate permissions."
I don't think this is the case. If I allow someone read & write access to a folder because they need to have read & write access to two of three subfolders, I cannot deny them (at least) read access to the third folder.
In respect of a particular folder:
1. You can only assign read; read & write; or write (drop box) to an individual user; and
2. You can only assign No Access to everyone.
Do I need to use Snow Leopard Server to be able to assign No Access to a particular folder for an individual user?

File associations in Windows 8.1 for applications on a network location

Hi,
From Windows 7 to Windows 8 it has been done alot of changes regarding file file assocations. It seem that the main reason was security and was "patched" by having Windows read the hash for the applications instead of where the application was
located.
but there seem to be some major hicups and there is limited info on the web covering these issues.
First issue: when running: Dism /Online /Export-DefaultAppAssociations:\\Server\Share\AppAssoc.xml and then creating a GPO configuration pointing to
thi XML file. With this feature only common file extensions is supported and when users are changing to another computer, these settings is not possible to syncronize using roaming profiles.
Second issue: In the appassoc.xml file applications must be either appid(metro app) or common application on local harddrive to be registered and not a .EXE
file on a network location.
It seems a little strange if this is the case and if there is no other options for administratos to set file associations in more flexible ways. Does anyone have some more info on
this topic other than these link:
https://technet.microsoft.com/en-us/library/hh825038.aspx?f=255&MSPPError=-2147217396
http://blogs.technet.com/b/mrmlcgn/archive/2013/02/26/windows-8-associate-a-file-type-or-protocol-with-a-specific-app-using-a-gpo-e-g-default-mail-client-for-mailto-protocol.aspx
https://keithga.wordpress.com/2013/11/13/file-associations-in-windows-8/

Hi Primeid,
You could use Group policy for file associations or you could deploy the xml file during image deployment. However as you mentioned that the file associations only applies to common application on local hard drive or metro app.
http://blogs.technet.com/b/mniehaus/archive/2014/01/10/configuring-file-associations-in-windows-8-1.aspx
http://blogs.technet.com/b/mrmlcgn/archive/2013/02/26/windows-8-associate-a-file-type-or-protocol-with-a-specific-app-using-a-gpo-e-g-default-mail-client-for-mailto-protocol.aspx
We understand your confusion about this, but we hope you understand that using network location for file association deployment is highly insecure and it is out of our recommendation since the content in that network location could be changed without any
notification or permissions constraint.
Thanks for your understanding.
Regards
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

I have an iMac. , mid 2007. Frequently, when I take an action, the little color wheel starts spinning and goes on for quite awhile. Save a file, close a file, open a file, open a window, it's all random. Somtimes it stalls, sometimes it doesn't. Why?

I have an iMac. , mid 2007. Frequently, when I take an action, the little color wheel starts spinning and goes on for quite awhile. Save a file, close a file, open a file, open a window, it's all random. Somtimes it stalls, sometimes it doesn't. Sometimes long, sometims short. Why is this happening?

Consider adding more memory. Be sure you have adequate free space on the hard drive - 15 GBs or 10% of the drive's capacity, whichever is greater. Do not run too many applications concurrently. Visit The XLab FAQs and read the FAQ on resolving the SBBOD.
Do some maintenance:
Repair the Hard Drive and Permissions
Boot from your Leopard Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Utilities menu. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the installer.
If DU reports errors it cannot fix, then you will need Disk Warrior and/or Tech Tool Pro to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
Kappy's Personal Suggestions for OS X Maintenance
For disk repairs use Disk Utility. For situations DU cannot handle the best third-party utilities are: Disk Warrior; DW only fixes problems with the disk directory, but most disk problems are caused by directory corruption; Disk Warrior 4.x is now Intel Mac compatible. Drive Genius provides additional tools not found in Disk Warrior. Versions 1.5.1 and later are Intel Mac compatible.
OS X performs certain maintenance functions that are scheduled to occur on a daily, weekly, or monthly period. The maintenance scripts run in the early AM only if the computer is turned on 24/7 (no sleep.) If this isn't the case, then an excellent solution is to download and install a shareware utility such as Macaroni, JAW PseudoAnacron, or Anacron that will automate the maintenance activity regardless of whether the computer is turned off or asleep. Dependence upon third-party utilities to run the periodic maintenance scripts was significantly reduced since Tiger. These utilities have limited or no functionality with Snow Leopard or Lion and should not be installed.
OS X automatically defragments files less than 20 MBs in size, so unless you have a disk full of very large files there's little need for defragmenting the hard drive. As for virus protection there are few if any such animals affecting OS X. You can protect the computer easily using the freeware Open Source virus protection software ClamXAV. Personally I would avoid most commercial anti-virus software because of their potential for causing problems. For more about malware see Macintosh Virus Guide.
I would also recommend downloading a utility such as TinkerTool System, OnyX 2.4.3, or Cocktail 5.1.1 that you can use for periodic maintenance such as removing old log files and archives, clearing caches, etc.
For emergency repairs install the freeware utility Applejack. If you cannot start up in OS X, you may be able to start in single-user mode from which you can run Applejack to do a whole set of repair and maintenance routines from the command line. Note that AppleJack 1.5 is required for Leopard. AppleJack 1.6 is compatible with Snow Leopard. There is no confirmation that this version also works with Lion.
When you install any new system software or updates be sure to repair the hard drive and permissions beforehand. I also recommend booting into safe mode before doing system software updates.
Get an external Firewire drive at least equal in size to the internal hard drive and make (and maintain) a bootable clone/backup. You can make a bootable clone using the Restore option of Disk Utility. You can also make and maintain clones with good backup software. My personal recommendations are (order is not significant):
Carbon Copy Cloner
Data Backup
Deja Vu
SuperDuper!
SyncTwoFolders
Synk Pro
Synk Standard
Tri-Backup
Visit The XLab FAQs and read the FAQs on maintenance, optimization, virus protection, and backup and restore.
Additional suggestions will be found in Mac Maintenance Quick Assist.
Referenced software can be found at CNet Downloads or MacUpdate.
Be sure you have an adequate amount of RAM installed for the number of applications you run concurrently. Be sure you leave a minimum of 10% of the hard drive's capacity as free space.

How to set all file permissions to default?

So a few background notes are in order. I came across an article on the NSA's website titled Hardening Tips for Mac OS x 10.6 "Snow Leopard", needless to say I have come to believe I have made this irreversible. The NSA suggested to do some fancy command line coding to disable this, modify that, and change permissions to this. After hours spent on "hardening" my system, I have little hair left to pull in frustration. Is there any way to restore all file permissions back to default? I have used the Repair Disk Permissions, but that has done very little. To give the scope of what permissions have been skewed, I have observed several things:
The desktop wallpapers, on all Desktops (as I'm in Lion 10.7.3), start from the same picture every time. I have the wallpapers changing, randomly, every 5 minutes.
Safari doesn't keep the home page. No matter how often I try to change the homepage, I restart Safari, and I'm right back to the original homepage.
Firefox doesn't retain the fact that I want it to be the default Web Browser. In fact, it keeps "forgetting" that I've used it before, and thus brings me to their awesome start page whenever someone first uses Firefox.
Spotlight gets "stuck" i.e. almost every time I start my machine, it indexes. Even after I let it finish indexing, the next time I start my computer, it starts again.
I have to input the administrator password after almost every activity, such as copying to the desktop, moving an application not bought from the Mac App Store into the /Applications folder, deleting a file from anywhere inside my home folder, etc.
Some preference panes that need access to certain folders, such as Hazel's access to my desktop, are denied that access without ever prompting me for a password (though even if it did, it would get rather annoying after every startup)
My firewall (in System Preferences>Security & Privacy>Firewall) doesn't "remember" that I do indeed want Dropbox to accept incoming connections. I have to input my admin password at each startup after clicking "allow"
Opera pretty much doesn't function. Its bookmarking capability, home page, saved tabs, any thing that requires the saving of any type of preference to the computer results in a dialog pop up informing me that Opera failed to save what it needed, and prompts me to "Try again" or "Cancel" (hint: the "Try again" button doesn't work)
There are more symptoms of an ever growing problem.
I have backed up my machine from Time Machine, but I think it retains these file permissions, unless I'm wrong.
Summary:
How can I fully restore EVERY file permission back to default? Repair Disk Permissions doesn't work
Is there a way that I can re-install Mac OS X, restore through Time Machine, and achieve the default file permissions, essentially losing all file permissions?

Repairing the permissions of a home folder in Lion is a complicated procedure. I don’t know of a simpler one that always works.
Launch the Terminal application by entering the first few letters of its name into a Spotlight search. Drag or copy – do not type – the following line into the window, then press return:
chmod -R -N ~
If you get an error message about permissions, enter this:
sudo !!
You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up.
Next, boot from your recovery partition by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the recovery desktop appears, select Utilities ▹ Terminal from the menu bar.
In the Terminal window, enter “resetpassword” (without the quotes) and press return. A Reset Password window opens.
Select your boot volume if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select  ▹ Restart from the menu bar.

Problem with file permissions

Hello all,
I am making a simple HttpServlet, which takes input
from html page and saves in to a file, but I'm having a
bit of a problem with file permissions.
I'm getting the following exception
java.security.AccessControlException: access denied (java.io.FilePermission ./data/result read)
     java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
     java.security.AccessController.checkPermission(AccessController.java:427)
     java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
     java.lang.SecurityManager.checkRead(SecurityManager.java:871)
     java.io.File.exists(File.java:700)
     SyksyHTTPServlet.doPost(SyksyHTTPServlet.java:31)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
     sun.reflect.GeneratedMethodAccessor52.invoke(Unknown Source)
     sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     java.lang.reflect.Method.invoke(Method.java:585)
     org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:243)
     java.security.AccessController.doPrivileged(Native Method)
     javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
     org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:275)
     org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:161)The exception seems to occur when I'm trying to check whether the file already
exists or not.
The data directory has all permissions (read, write and execute) set for all users,
and I have made an empty file called result inside the data directory for testing.
This file has read and write permissions enabled for all users.
Here's my code
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.Enumeration;
import java.util.List;
import java.util.ArrayList;
public class SyksyHTTPServlet extends HttpServlet
     public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
          int totalCount = 0;
          List list;
          String song = request.getParameter("song");
          PrintWriter out = response.getWriter();
          File file = new File("./data/result");
          if(file.exists()) // this is line 31, which seems to cause the exception
               list = readFile(file);
          else
               file.createNewFile();
               list = new ArrayList();
          list.add(song);
          writeFile(file, list);
          for(int i = 0 ; i < list.size() ; i++)
               out.println(list.get(i));
     public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
          doPost(request, response);
     private List readFile(File file)
          List list = null;
          try
               FileInputStream fis = new FileInputStream(file);
               ObjectInputStream ois = new ObjectInputStream(fis);
               list = (ArrayList)ois.readObject();
               ois.close();
          catch(Exception e)
               e.printStackTrace();
          return list;
     private void writeFile(File file, List list)
          try
               FileOutputStream fos = new FileOutputStream(file);
               ObjectOutputStream oos = new ObjectOutputStream(fos);
               oos.writeObject(list);
               oos.flush();
               oos.close();
          catch(Exception e)
               e.printStackTrace();
}I'm using Tomcat 5.5 on Ubuntu Linux, if that has anything to do with this.
I'll appreciate all help.
kari-matti

Hello again.
I'm still having problems with this. I made
a simple servlet that reads from and writes
to text file. The reading part work fine on my
computer, but the writing doesn't, not even
an exception is thrown if the file exists that
I'm trying to write to. If I try to create a new
file I'll get an exception about file permissions.
I also asked a friend of mine to try this same
servlet on his windows computer and it works
as it should.
Here's the code
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
public class ReadServlet extends HttpServlet
     public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
          String s = "";
          PrintWriter out = response.getWriter();
          String docroot = getServletContext().getRealPath( "/" );
          out.println("docroot: "+docroot);
          File file = new File(docroot+"test.txt");
          if(file.exists())
               s = readFile(file);
               out.println(s);
          else
               out.println("file not found");
               //file.createNewFile();                    // causes exception
               //out.println("new file created.");
          writeFile(file, "written by servlet");
          out.println("Now look in the file "+file.getPath());
          out.println("and see if it contains text 'written by servlet'");
     public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException
          doPost(request, response);
     private String readFile(File file)
          FileInputStream fis = null;
          BufferedInputStream bis = null;
          DataInputStream dis = null;
          String s = "";
          try
               fis = new FileInputStream(file);
               bis = new BufferedInputStream(fis);
               dis = new DataInputStream(bis);
               s = dis.readLine();
               fis.close();
               bis.close();
               dis.close();
          catch(Exception e)
               e.printStackTrace();
          return s;
     private void writeFile(File file, String s)
          FileOutputStream fos = null;
          BufferedOutputStream bos = null;
          DataOutputStream dos = null;
          try
               fos = new FileOutputStream(file);
               bos = new BufferedOutputStream(fos);
               dos = new DataOutputStream(bos);
               dos.writeChars(s);
               fos.flush();
               bos.flush();
               dos.flush();
               fos.close();
               bos.close();
               dos.close();
          catch(Exception e)
               e.printStackTrace();
}And if someone wants to test this servlet I can
give a war package.
Any advices?
kari-matti

File Permissions in windows XP

Similar Messages

Maybe you are looking for