Jaas and jar

Question

Hello,
I have developped my own jaas policy class to check permission given to the current user. The class(RolePolicy) get the list of permission in database.
To activate security, I execute
Policy.setPolicy(new RolePolicy(roles));
System.setSecurityManager(new SecurityManager());
and no additionnal configuration (no property, no configuration file)
The RolePolicy class load permission from db and create a permission collection. Then I check permission by AccessController.checkPermission(x) and catch AccessControllerException if the access control is not checked.
This security management is included in a dedicated jar and my application call it to activate permission management.
Everything works great while executing in application mode in jbuilder but it does not work anymore if i switch to jar mode (javaw -jar). It seems that my own policy class is not really loaded when I execute AccessController.checkPermission.
I tried to sign jar but i does not change anything. Any idea?

Answer 1

In fact, my explanation is not correct. My 'security jar' is not included but as a jbuilder project, the class needed for my application are included directly in my application's jar. I actually manage to see trace that are present in my rolePolicy. But It seams that the policy class is not used when I call checkPermission. When I call it, it uses the standard policy file (however I can see trace showing that the setPolicy is correctly executed.
I also tried with the same classpath/jre as the one used when launching in application mode but everytime I store class in jar, the policy class is not used by the access controler.