Granting & reverting previlages at runtime

Question

hello ...
i'm trying to migrate an applet currently implemented netscape and microsoft security packages(com.ms.security & netscape.security) using Javas plug-ins. But during the life time of this applet permissions are granted and revoked dynamically.
like....
if (miBrowserSecurity == MyClass.NETSCAPE)
               PrivilegeManager.enablePrivilege("UniversalSystemClipboardAccess");
          if (miBrowserSecurity == MyClass.NETSCAPE)
               PrivilegeManager.revertPrivilege("UniversalSystemClipboardAccess");
How to implement this functionality using java2 plug-ins. Do i need to implement
custom policy ?
Please help

Answer 1

If you use a certificate from a certificate authority such as Verisign or Thawte, the user will be prompted to to grant permission and then your applet will have AllPermission. See http://java.sun.com/j2se/1.4.2/docs/guide/plugin/developer_guide/rsa_how.html for details ... the important paragraph being -
"If Plug-in can verify the certificate chain all the way up to its Root CA certificate, it checks if that Root CA certificate is contained in the database of trusted Root CA certificates. If so, Plug-in will display the certificate chain of the authenticated signer and ask the user whether or not to grant AllPermission to code signed by that principal. Java code that is assigned the AllPermission permission is treated the same as system code, meaning it has all the privileges that system code has. The user can then choose whether or not to grant AllPermission to code signed by that principal, and whether such permission should be granted to any code signed by that principal for all subsequent sessions or for the current session only. "