J2ee-application-client-permissions details

I haven't been able to find any documentation on what this security setting provides. I'd like to know what can and can't be done with this level. Does anybody have a list of the Java security permissions that it grants?

Boy do I feel silly. Somehow I missed that. I'm guessing it's because the body of the table was on the next page separate from the table so I lost the context.
I'm bummed to see java.io.FilePermission listed there.
Comparing that list with the permissions documented in http://java.sun.com/j2se/1.4.2/docs/guide/security/permissions.html, there does appear to be a handful of permissions that are not granted, but the permissions given don't seem too constrained.
We'd like our application to only have enough permission to talk to a remote database or J2EE server. I see additional security levels might be under consideration in the JSR-056 update. Why not just allow the low-level Java permissions in the JNLP file directly rather than have these permission groups?
Anyway, thanks very much for the pointer.

Similar Messages

How to create and run J2EE application client for Hello World EJB

Hi
I am new to NWDS EJB deployment.I have created a "Hello World" bean. But how to deploy it and run using a J2EE application client step by step.
Also please help in the steps of the deploy tool.
Thanks in Advance

Hi Ananda
Check this link,
http://help.sap.com/saphelp_nw04/helpdata/en/55/600e64a6793d419b82a3b7d59512a5/content.htm
cheers
Sameer

J2EE Application Client Container

Hi everyone,
I've three questions about J2EE Application Client Container.
1) What do I have to install into the client computer so that my J2EE client application can run?
2) Can I install my client application and also the client container through Java Web Start?
3) Can I develop a (remote) client application that needs only J2SE but uses the Enterprise Java Beans?
Thanks for the help

Hi everyone,
I've three questions about J2EE Application Client
Container.
1) What do I have to install into the client computer
so that my J2EE client application can run?This is vendor specific. So you have to read your application server docmentation.
If you are using Sun Java System Application Server (which is now open sourced at glassfish.dev.java.net), then here is a useful document for you:
http://docs.sun.com/app/docs/doc/819-2642/6n4tspp7b?a=view
>
2) Can I install my client application and also the
client container through Java Web Start?
This is not yet required by Java EE platform, not in J2EE 1.4 and is not going to be rquired in Java EE 5 as well. So you have to ask your appserver vendor to see if they support Java Web Start for appclient container. Sun Java System Application Server 9.0 which is being developed in open source project glassfish (http://glassfish.dev.java.net) supports Java Web Start. You can check out.
3) Can I develop a (remote) client application that
needs only J2SE but uses the Enterprise Java Beans?No, you typically need additional libraries. Typically vendors provides a tool that makes a nice package that you can take to a remote host and run the appclient container there. e.g. if you are using Sun Java System Application Server, here is what you need to do:
http://docs.sun.com/app/docs/doc/819-2642/6n4tspp7j?a=view#beale
-- Sahoo
>
Thanks for the help

J2EE Application Client Components

Anybody knows a good tutorial (online available) for writing J2EE Application Client Components?

Oh, you want an entire tutorial about client
components...
There is a little info in this chapter of the above
http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/WCC.html
Isn't a client component just a browser, or a java
application/applet, or an executable?Yes, a client may be a browser. But I want to write an own executable java application as a client for my j233 application. I found a short chapter in "Enterprise Java Beans" by Richard Monson-Haefel and there, he writes about client components as standalone Java-applications. I read something about explicit declaring them in the application.xml and I wonder why this should be...? So I wondered if there is a special tutorial about writing standalone applications as clients for j2ee web applications...
I think the chapter you posted is only about web components...

J2EE Application Client

I used Sun Java Studio Enterprise to create a stateful session bean (Cart as in the J2ee Tutorial) and deployed it to Sun Application Server (v7). Then in the same application, I creaed a New EJB Test Application (web based test application) called Cart_TestApp by highlighting the Cart (EJB) node and clicking "Create New EJB Test Application" . Everything is perfect and I could use this Cart_TestApp (once again it is web based test app) to test each function defined in the CartHome, Cart. After that, I created another application client to test this Cart bean. The way I did is that I created another J2EE Application Client called CartTestClient by using Templates-->J2EE--->Application Client. Then in the property sheet of this Application Client, I specified two properties:
1. Application Server----- Server1 (localhost:8080)
2. EJB Reference----
2.1 Reference Name---- ejb/Cart
2.2 Reference EJB Name----Cart
2.3 Type---Session
2.4 Home Interface ----CartHome
2.5 Remote Interface ---Cart
After that, I built this Application Client and executed the Application Client, but Studio prompts the following error message:
You must either set a target application, or provide a client stub jar path in the Sun Java System AS tab on the client property sheet!
In this case, I clicked ellipse for the "Target Application" on the property sheet, which finally only allows me to specify "Cart_TestApp" , note not Cart(EJB), as the Target Application. And I did it. Finally it works just fine for the Application Test.
Now my questions are:
1. How to get the EJB client stub jar in the studio for this Cart (EJB)?
2. Why does the Application Client work just fine after I specified the "Target Application" item in the property sheet as "Cart_TestApp" since "Cart_TestApp" is only a web based test application for the Cart (EJB)? It seems to me that the EJB Application Client has nothing to do with "Cart_TestApp" since both of them are just test clients (one is web based, another standalone java client). Any insights??
Thanks.
Yang

I have figured it out now and actually Cart_TestApp is just an enterprise application generated by Studio with Cart(EJB) inside. Got confused it with SJSAS v8.

How to run J2EE application client remotely

I have the Duke's Bank demo running on a Linux PC "crackpad" (http://thomasfly.com:8000/bank/logon CustomerID=200, Password=j2ee) which I can access LAN-wise as http://crackpad:8000/etc. Accessing the bank as an administrator using the J2EE app. client also works fine (locally) on the Linux PC.
I've also installed & run the Bank demo on a Windows PC, so I have all the req'd ears & jars there as well. However, when I try to run the app client on the Windows PC (accessing the J2EE Reference Implementation server on running crackpad), I getC:\j2eetutorial\bank\jar> runclient -client DukesBankApp.ear -name BankAdmin
Application threw an exception:javax.naming.NamingException: Serial Context failureI set the environment variables per http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/Tools10.html#65815 http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/Tools10.html :C:\j2eetutorial\bank\jar> echo %VMARGS%
-Dorg.omg.CORBA.ORBInitialHost=crackpad
C:\j2eetutorial\bank\jar> echo %APPCPATH%
DukesBankAppClient.jar
C:\j2eetutorial\bank\jar> dir DukesBankApp*.*
07/10/2002 09:58 PM           420,480 DukesBankApp.ear
07/10/2002 10:25 PM           712,814 DukesBankAppClient.jarHas anybody encountered this problem & solved it, or see anything that I've overlooked?

I have the Duke's Bank demo running on a Linux PC "crackpad" (http://thomasfly.com:8000/bank/logon CustomerID=200, Password=j2ee) which I can access LAN-wise as http://crackpad:8000/etc. Accessing the bank as an administrator using the J2EE app. client also works fine (locally) on the Linux PC.
I've also installed & run the Bank demo on a Windows PC, so I have all the req'd ears & jars there as well. However, when I try to run the app client on the Windows PC (accessing the J2EE Reference Implementation server running on crackpad), I getC:\j2eetutorial\bank\jar> runclient -client DukesBankApp.ear -name BankAdmin
Application threw an exception:javax.naming.NamingException: Serial Context failureI set the environment variables per http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/Tools10.html#65815 :C:\j2eetutorial\bank\jar> echo %VMARGS%
-Dorg.omg.CORBA.ORBInitialHost=crackpad
C:\j2eetutorial\bank\jar> echo %APPCPATH%
DukesBankAppClient.jar
C:\j2eetutorial\bank\jar> dir DukesBankApp*.*
07/10/2002 09:58 PM           420,480 DukesBankApp.ear
07/10/2002 10:25 PM           712,814 DukesBankAppClient.jarHas anybody encountered this problem & solved it, or see anything that I've overlooked?

J2EE Tutorial - Application Client

Hi,
I've been trying to work through the J2EE Tutorial and I've come to a complete standstill at the EJB section. I have a few problems.
First of all my deployment tool does not have a JNDI Names Tag as shown in the Mapping The Enterprize Beans Section (Chapter 19). How do I do this?
I am getting the following error when I try to run my J2EE Application Client.
Caught an unexpected exception!
java.lang.ClassCastException
at com.sun.corba.ee.impl.javax.rmi.PortableRemoteObject.narrow(PortableR
emoteObject.java:229)
at javax.rmi.PortableRemoteObject.narrow(PortableRemoteObject.java:134)
at ConverterClient.main(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.sun.enterprise.util.Utility.invokeApplicationMain(Utility.java:23
7)
at com.sun.enterprise.appclient.Main.<init>(Main.java:425)
at com.sun.enterprise.appclient.Main.main(Main.java:97)
Caused by: java.lang.ClassCastException
at com.sun.corba.ee.impl.javax.rmi.PortableRemoteObject.narrow(PortableR
emoteObject.java:212)
Finally, can anybody recommend a good tutorial or book as I think the J2EE tutorial is unusually bad.

http://docs.sun.com/source/819-0079/dgacc.html
Finally, can anybody recommend a good tutorial or
book as I think the J2EE tutorial is unusually bad.Search for Mastering EJB by Ed Roman. It should give a better understanding.

j2ee-application .... what is this tag for???

Hi,
can anyone tell my why I should ever use this magic <j2ee-application....> Tag within the <security> Tag of a JNLP-File??? I never needed it and in my opinion nobody will ever need it....
So what is this tag for??? What can I achieve with it?
Thank you,
Sven Haiges

according to the book http://developer.java.sun.com/developer/Books/jnlp/
j2ee-appplication-client-permissions does the following:
When used with a trusted appliction (signed and explicitly accepted by the user), this subelement grants the below permissions:
java.awt.AWTPermision (access to system clipboard)
java.awt.AWTPermission (access to event queue)
java.awt.AWTPermission (show window without warning banner)
java.lang.RuntimePermission (allow exit of JVM)
java.lang.RuntimePerimission (allow load library)
java.lang.RuntimePermission (allow queue of print job)
java.net.Socket.Permission (allow socket connectins)
java.io.FilePermission (allow read/write files)
java.io.Property permission (allow read properties)

EJB 3.0 Application Client threw Remote nested exception

Hi All,
I came across the following EJBException message when trying to retrieve an Employee record (entity bean in EJB 3.0) after having successfully added it into EMPLOYEE table using stateless session bean:
*10/03/2009 8:53:14 PM com.sun.enterprise.appclient.MainWithModuleSupport <init>*
WARNING: ACC003: Application threw an exception.
javax.ejb.EJBException: nested exception is: java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.RemoteException: null; nested exception is:
java.lang.NullPointerException
java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.RemoteException: null; nested exception is:
java.lang.NullPointerException
at com.sun.corba.ee.impl.javax.rmi.CORBA.Util.mapSystemException(Util.java:243)
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.privateInvoke(StubInvocationHandlerImpl.java:205)
at com.sun.corba.ee.impl.presentation.rmi.StubInvocationHandlerImpl.invoke(StubInvocationHandlerImpl.java:152)
at com.sun.corba.ee.impl.presentation.rmi.bcel.BCELStubBase.invoke(BCELStubBase.java:225)
at ejb.__EmployeeRemote_Remote_DynamicStub.findEmployee(ejb/__EmployeeRemote_Remote_DynamicStub.java)
at ejb._EmployeeRemote_Wrapper.findEmployee(ejb/_EmployeeRemote_Wrapper.java)
at client.EmployeeApplicationClient.printEmployee(EmployeeApplicationClient.java:608)
at client.EmployeeApplicationClient.main(EmployeeApplicationClient.java:55)
Below is the code snippets of EmployeeApplicationClient.java:
public class EmployeeApplicationClient {
    @EJB
    private static EmployeeRemote employeebean1;
    @EJB
    private static EmployeeRemote employeebean2;
    public EmployeeApplicationClient() {}
    public static void main(String[] args)
        EmployeeApplicationClient employee_application_client = new EmployeeApplicationClient();
        employee_application_client.addEmployee(1, John, Smith);
        employee_application_client.printEmployee(1);
    public void addEmployee(int id, String firstname, String surname)
        try {
            Employee employee1 = new Employee();
            employee1.setID(id);
            employee1.setfirstname(firstname);
            employee1.setsurname(surname);
            employeebean1.createEmployee(employee1);
        catch {.....}
    public void printEmployee(int employee_id)
       Employee employee2 = employeebean2.findEmployee(employee_id);
       System.out.println("employee Id: " + employeebean2.getId());
       System.out.println("employee firstname: " + employeebean2.getfirstname());
       System.out.println("employee surname: " + employeebean2.getsurname());
}Using employeebean1/employeebean2 in printEmployee() did not make any difference.
The error message appears to indicate that I have incorrectly structured these methods.
The deployment of EmployeeBean was successful and employee1 is in EMPLOYEE table via SQL query.
I am using JDK1.6.07, Glassfish v2 with MySQL 5.0 and Netbeans 6.1 on Windows XP platform.
Any assistance would be greatly appreciated.
Thanks,
Jack

Hi Ataraxisme,
Thank you for responding to this post.
This is a J2EE Application Client that was created and deployed along as an Netbeans EAR (both Application Client and EJB) project which uses resource injection as opposed to JNDI lookup.
I am trying to get employeeApplicationClient.java to work the same way as the following travelAgentApplicationClient.java example which has successfully retrieved its record record immediately after adding using resource injection:
public class TravelAgentClient {
    @EJB
    private static TravelAgentRemote travelagent;
    public TravelAgentClient() {
    public static void main(String[] args) {
        TravelAgentClient client = new TravelAgentClient();
        client.doTravelAgent();
    public void doTravelAgent() {
        try {
            Cabin cabin_1 = new Cabin();
            cabin_1.setId(1);
            cabin_1.setName("Master Suite");
            cabin_1.setDeckLevel(1);
            cabin_1.setShipId(1);
            cabin_1.setBedCount(3);
            travelagent.createCabin(cabin_1);
            Cabin cabin_2 = travelagent.findCabin(1);
            System.out.println(cabin_2.getName());
            System.out.println(cabin_2.getDeckLevel());
            System.out.println(cabin_2.getShipId());
            System.out.println(cabin_2.getBedCount());
         ......Thanks,
Jack

Application Client

The J2EE specification requires support for a client container that runs standalone Java applications (known as J2EE application clients) and provides J2EE services to the applications. J2EE services include naming, security, and resource connections.
The only information i could find about this topic was, how to deploy a J2EE Client module in JDeveloper.
But how are J2EE application clients of OC4J/ORACLE IAS are launched.
And how do they use the J2EE services(security...JAAS) mentioned above.

The subject here is the CLIENT Container and NOT the J2EE Container.
The tutorials you mentioned only contain Web clients.
The testing client is a simple RMI/IIOP Client.
The JDeveloper doc says:
"Oracle9iAS provides full support for J2EE Client applications. For more information, refer to "Chapter 9, Application Clients in the J2EE Platform Specification".
So have a look here, to know, what we are talking about:
http://java.sun.com/j2ee/j2ee-1_3-fr-spec.pdf Chapter 9
The others do it this way:
http://www-3.ibm.com/software/webservers/appserv/doc/v40/ae/infocenter/was/06060007.html
How is this done for our product?
How can i launch my client in an (Oracle) application-client-container against my EJB's hosted by an OC4J ?

NullPointerException while Invoking the Application Client class

I am trying to use Application Client Testing Tool in WSAD 5.0. Getting NullPointerException while the class is getting invoked. Could somebody help me...
IBM WebSphere Application Server, Release 5.0
J2EE Application Client Tool
Copyright IBM Corp., 1997-2002
WSCL0012I: Processing command line arguments.
WSCL0001I: Command line, property file, and system property arguments resolved to:
File to launch = D:/test/TestEAR
CC Property File = null
Client Jar File = <default>
Alternate DD = null
BootstrapHost = hostxyz
BootstrapPort = <default>
Trace enabled = false
Tracefile = null
Init only = false
Classpath Parameter = null
Security Manager = disable
Security Manager Class = Not used. -CCsecurityManager=disable
Security Manager Policy = Not used. -CCsecurityManager=disable
Exit VM = false
Soap Connector Port = null
Application Parameters =
WSCL0013I: Initializing the J2EE Application Client Environment.
WSCL0600I: Binding HandleDelegate object.
WSCL0031I: The object was bound successfully.
WSCL0900I: Initializing and starting components.
WSCL0910I: Initializing component: com.ibm.ws.activity.ActivityServiceComponentImpl
WSCL0911I: Component initialized successfully.
WSCL0901I: Component initialization completed successfully.
WSCL0035I: Initialization of the J2EE Application Client Environment has completed.
WSCL0014I: Invoking the Application Client class TestMDB
WSCL0100E: Exception received: java.lang.NullPointerException     at java.lang.reflect.Method.invoke(Native Method)
     at com.ibm.websphere.client.applicationclient.launchClient.createContainerAndLaunchApp(launchClient.java:616)
     at com.ibm.websphere.client.applicationclient.launchClient.main(launchClient.java:420)
     at java.lang.reflect.Method.invoke(Native Method)
     at com.ibm.ws.bootstrap.WSLauncher.main(WSLauncher.java:94)

Some more info:
This is in ApplicationClientModule of TestEAR. This EAR has an EJBModule. ApplicationClientModule invokes one of the EJBs. Selected TestEAR as Enterprise Application.

Reports 9i/10g J2EE Thin Client for Websphere Application Server 5.x /6.x

We are having Reports developed in 6i which needs to be migrated to Reports 9i/10G and we want to deploy these reports in web using Websphere Application Server 5.x /6.x without Oracle iAS.
Do we have Reports 9i/10g J2EE Thin Client for Websphere Application Server 5.x /6.x and if so please let me know.
Also if anybody has the configuration details please let me know?
Thanks in Advance.

No there is not. I don't think you can use reports services with Websphere - besides as far as I know it is not supported by Oracle (not anywhere in their support matrix).

Is it possible to refresh the client from serverside in j2ee application

Hello
Is it possible to refreshh the client from server side in j2ee Application server using JMS technology,
If you know about it plz. mail me on [email protected] Or plz. reply me over here.
Thank you

You can either use server push or client pull.
Server push:
Server push the changes to client on every certain time interval.
You can make client to subscribe for JMS topic created on server side. Every certain interval, server needs to publish a message and JMS will distribute all the message to the subscribers (clients)
Client pull:
Each client request/inquiry the changes from server on every certain time interval.
You can't use JMS (you can but you must use P2P (queue), which is not recommended in this case).
You can make the client to post HTTP request to get the latest data from server on every certain time interval.
Alex

I unable to run ejb with application client using oc4j j2ee container

Hi,
I have installe oracle9i (1.0.2.2) oc4j j2ee container.
I unable to run the ejbs . please help me how to run ejbs with application client and which files are shall configure.
See the client application is :
public static void main (String []args)
try {
//Hashtable env = new Hashtable();
//env.put("java.naming.provider.url", "ormi://localhost/Demo");
//env.put("java.naming.factory.initial", "com.evermind.server.ApplicationClientInitialContextFactory");
//env.put(Context.SECURITY_PRINCIPAL, "guest");
//env.put(Context.SECURITY_CREDENTIALS, "welcome");
//Context ic = new InitialContext (env);
System.out.println("\nBegin statelesssession DemoClient.\n");
Context context = new InitialContext();
Object homeObject = context.lookup("java:comp/env/DemoApplication");
DemoHome home= (DemoHome)PortableRemoteObject.narrow(homeObject, DemoHome.class);
System.out.println("Creating Demo\n");
Demo demo = home.create();
System.out.println("The result of demoSelect() is.. " +demo.sayHello());
}catch ( Exception e )
System.out.println("::::::Error:::::: ");
e.printStackTrace();
System.out.println("End DemoClient....\n");
When I am running client application I got this type of Exception
java.lang.SecurityException : No such domain/application: sampledemo
at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java : 2040)
at com.evermind.server.rmi.RMIConnection.connect(RMIConnection.java : 1884)
at com.evermind.server.rmi.RMIConnection.lookup(RMIConnection.java : 1491)
at com.evermind.server.rmi.RMIServer.lookup(RMIServer.java : 323)
at com.evermind.server.rmi.RMIContext.lookup(RMIConext.java : 106)
at com.evermind.server.administration.LazyResourceFinder.lookup(LazyResourceFinder.java : 59)
at com.evermind.server.administration.LazyResourceFinder.getEJBHome(LazyResourceFinder.java : 26)
at com.evermind.server.Application.createContext(Application.java: 653)
at com.evermind.server.ApplicationClientInitialContext.getInitialContext(ApplicationClientInitialContextFactory.java :179 )
at javax.naming.spi.NamingManager.getInitialContext(NamingManger.java : 246)
at javax.naming.InitialContext.getDefaultInitialCtx(InitialContext.java : 246)
at javax.naming.InitialContext.init(InitialContext.java : 222)
at javax.naming.InitialContext.<init>(InitialContext.java : 178)
at DemoClient.main(DemoClient.java : 23)
.ear file is copied into applications directory.
I have configured server.xml file like this
<application name="sampledemo" path="../applications/demos.ear" />
demos.ear file Contains following files
application.xml
demobean.jar
Manifest.mf
demobean.jar file contains following files
application-client.xml
Demo.class
DemoBean.class
DemoHome.class
ejb-jar.xml
jndi.properties
Mainifest.mf
Please give me your valuable suggestions. Which are shall i configure .
Thanks & Regards,
Badri

Hi Badri,
ApplicationClientInitialContextFactory is for clients which got deployed inside OC4J container..
For looking up EJB from a stand alone java client please use RMIInitialContextFactory..So please change ur code....
Also please check ur server.xml
Since you have specified your ejb domain as "sampledemo"
you have to use that domian only for look up..But it seems that you are looking up for "Demo" domain instead of "sampledemo" domain...So change your code to reflect that..
Code snippet for the same is :
Hashtable env = new Hashtable();
env.put("java.naming.provider.url", "ormi://localhost/sampledemo");
env.put("java.naming.factory.initial", "om.evermind.server.rmi.RMIInitialContextFactory");
env.put(Context.SECURITY_PRINCIPAL, "guest");
env.put(Context.SECURITY_CREDENTIALS, "welcome");
Context ic = new InitialContext (env);
Hope this helps
--Venky

Portal User details and credentials for a J2EE application?

Hi,
I am trying to access a J2EE application which is deployed in SAP Web Application Server. I want to maintain the security of this application depending the portal user. So I want to get the user id of the portal login to my J2EE application. For Example:
A user with id "super" is logging into portal I want the userid "super" in my J2EE application how to get the userid to my J2EE application's servlet. Is this possible? If possible please tell how I can acheive it?
Can I do it by creating HTTP System? If possible can u tell me where can I set the URL?
Thanks,
Ashok.

hi,
Certainly you can get the user id of the portal login in your J2EE application by using UME api's
IUserFactory userFact = UMFactory.getUserFactory();
getUserFactory().getUser(String uniqueID)
getUserFactory().getUserByLogonID(String logonID)
Also have a look at this
http://help.sap.com/saphelp_nw04/helpdata/en/15/abdc3ed98f7650e10000000a114084/frameset.htm
Instead of url iview, it would be better to use AppIntegrator
Also have a look at this
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/events/webinars/using the user management api with ep applications.pdf
Hope it helps...
Regards,
Ganesh N
Hope it helps...

J2ee-application-client-permissions details

Similar Messages

Maybe you are looking for