Java.security.AccessControlException; com.ms.security.SecurityExceptionEx

hi ,
i am trying to run an applet which retrieves data from a database server, I am getting the following exception
in Internet Explorer
com.ms.security.SecurityExceptionEx
[oracle/net/nt/TcpNTAdapter.connect]: cannot
access "host":port
in Netscape Navigator
java.security.AccessControlException: access
denied (java.net.SocketPermission
"host":port connect,resolve)
in the line given below
conn = DriverManager.getConnection
(connect_string,login, passwd);
-----conn is of type Connection
i don't know how to solve this, can somebody help me out in this
Thanx
Reply soon
Himanshu

Hi,
I'm not sure of my solution but it seems to be working for me for the moment.
I have installed JRE v1.4 and made the following addition to the java.policy file, which is present in the lib/security folder.
grant {
permission java.lang.RuntimePermission "accessClassInPackage.sun.jdbc.odbc";
permission java.util.PropertyPermission "file.encoding", "read";
permission java.security.AllPermission;
IMPORTANT: After making the above addition, I had to open Java Console through Java Plugin Control Panel Application and Select option 'r'- reload policy configuration.
This made my applet to run in Netscape 7 but not in IE 6.0. In order to run the applet under IE 6.0, I had to run Java Plugin Control Panel Application select 'Broswer' tab and tick Internet Explorer checkbox. This enabled my IE 6.0 to use sun java 2 runtime environment.
I hope this was of any help to you.
regards,
Wamiq

Similar Messages

How can i deal with java.security.AccessControlException?

Hi all, I need to implement JavaMail using Servlet and deploy throught J2EE deployment tool. But when i test out the servlet i will always encounter this exception thrown. How can i solve this?
java.security.AccessControlException: access denied (java.util.PropertyPermission * read,write)
This is the servlet i am testing. Please advise. Thanks in advance!
* @(#)JavaMailServlet.java     1.3 99/12/06
* Copyright 1998, 1999 Sun Microsystems, Inc. All Rights Reserved.
* This software is the proprietary information of Sun Microsystems, Inc.
* Use is subject to license terms.
import java.io.*;
import java.util.*;
import java.text.*;
import javax.servlet.*;
import javax.servlet.http.*;
import javax.mail.*;
import javax.mail.internet.*;
import javax.activation.*;
* This is a servlet that demonstrates the use of JavaMail APIs
* in a 3-tier application. It allows the user to login to an
* IMAP store, list all the messages in the INBOX folder, view
* selected messages, compose and send a message, and logout.
* <p>
* Please note: This is NOT an example of how to write servlets!
* This is simply to show that JavaMail can be used in a servlet.
* <p>
* For more information on this servlet, see the
* JavaMailServlet.README.txt file.
* <p>
* For more information on servlets, see
* * http://java.sun.com/products/java-server/servlets/index.html
* @author Max Spivak
public class JavaMailServlet extends HttpServlet implements SingleThreadModel {
String protocol = "POP3";
String mbox = "INBOX";
* This method handles the "POST" submission from two forms: the
* login form and the message compose form. The login form has the
* following parameters: <code>hostname</code>, <code>username</code>,
* and <code>password</code>. The <code>send</code> parameter denotes
* that the method is processing the compose form submission.
public void doPost(HttpServletRequest req, HttpServletResponse res)
     throws ServletException, IOException {
// get the session
     HttpSession ssn = req.getSession(true);
     String send = req.getParameter("send");
String host = req.getParameter("hostname");
String user = req.getParameter("username");
String passwd = req.getParameter("password");
URLName url = new URLName(protocol, host, -1, mbox, user, passwd);
ServletOutputStream out = res.getOutputStream();
     res.setContentType("text/html");
     out.println("<html><body bgcolor=\"#CCCCFF\">");
     if (send != null) {
     // process message sending
     send(req, res, out, ssn);
     } else {
     // initial login
     // create
     MailUserData mud = new MailUserData(url);
     ssn.putValue("javamailservlet", mud);
     try {
          Properties props = System.getProperties();
          System.out.println("url");
          props.put("mail.smtp.host", host);
          Session session = Session.getDefaultInstance(props, null);
          session.setDebug(false);
          Store store = session.getStore(url);
          store.connect();
          Folder folder = store.getDefaultFolder();
          if (folder == null)
          throw new MessagingException("No default folder");
          folder = folder.getFolder(mbox);
          if (folder == null)
          throw new MessagingException("Invalid folder");
          folder.open(Folder.READ_WRITE);
          int totalMessages = folder.getMessageCount();
          Message[] msgs = folder.getMessages();
          FetchProfile fp = new FetchProfile();
          fp.add(FetchProfile.Item.ENVELOPE);
          folder.fetch(msgs, fp);
          // track who logged in
          System.out.println("Login from: " + store.getURLName());
          // save stuff into MUD
          mud.setSession(session);
          mud.setStore(store);
          mud.setFolder(folder);
          // splash
          out.print("<center>");
          out.print("<font face=\"Arial,Helvetica\" font size=+3>");
          out.println("<b>Welcome to JavaMail!</b></font></center><p>");
          // folder table
          out.println("<table width=\"50%\" border=0 align=center>");
          // folder name column header
          out.print("<tr><td width=\"75%\" bgcolor=\"#ffffcc\">");
          out.print("<font face=\"Arial,Helvetica\" font size=-1>");
          out.println("<b>FolderName</b></font></td><br>");
          // msg count column header
          out.print("<td width=\"25%\" bgcolor=\"#ffffcc\">");
          out.print("<font face=\"Arial,Helvetica\" font size=-1>");
          out.println("<b>Messages</b></font></td><br>");
          out.println("</tr>");
          // folder name
          out.print("<tr><td width=\"75%\" bgcolor=\"#ffffff\">");
          out.print("<a href=\"" + HttpUtils.getRequestURL(req) + "\">" +
               "Inbox" + "</a></td><br>");
          // msg count
          out.println("<td width=\"25%\" bgcolor=\"#ffffff\">" +
               totalMessages + "</td>");
          out.println("</tr>");
          out.println("</table");
     } catch (Exception ex) {
          out.println(ex.toString());
     } finally {
          out.println("</body></html>");
          out.close();
* This method handles the GET requests for the client.
public void doGet (HttpServletRequest req, HttpServletResponse res)
     throws ServletException, IOException {
HttpSession ses = req.getSession(false); // before we write to out
ServletOutputStream out = res.getOutputStream();
     MailUserData mud = getMUD(ses);
     if (mud == null) {
     res.setContentType("text/html");
     out.println("<html><body>Please Login (no session)</body></html>");
     out.close();
     return;
     if (!mud.getStore().isConnected()) {
     res.setContentType("text/html");
     out.println("<html><body>Not Connected To Store</body></html>");
     out.close();
     return;
     // mux that takes a GET request, based on parameters figures
     // out what it should do, and routes it to the
     // appropriate method
     // get url parameters
     String msgStr = req.getParameter("message");
String logout = req.getParameter("logout");
     String compose = req.getParameter("compose");
     String part = req.getParameter("part");
     int msgNum = -1;
     int partNum = -1;
     // process url params
     if (msgStr != null) {
     // operate on message "msgStr"
     msgNum = Integer.parseInt(msgStr);
     if (part == null) {
          // display message "msgStr"
res.setContentType("text/html");
          displayMessage(mud, req, out, msgNum);
     } else if (part != null) {
          // display part "part" in message "msgStr"
          partNum = Integer.parseInt(part);
displayPart(mud, msgNum, partNum, out, res);
     } else if (compose != null) {
     // display compose form
     compose(mud, res, out);
} else if (logout != null) {
     // process logout
try {
mud.getFolder().close(false);
mud.getStore().close();
          ses.invalidate();
out.println("<html><body>Logged out OK</body></html>");
} catch (MessagingException mex) {
out.println(mex.toString());
     } else {
     // display headers
     displayHeaders(mud, req, out);
/* main method to display messages */
private void displayMessage(MailUserData mud, HttpServletRequest req,
                    ServletOutputStream out, int msgNum)
     throws IOException {
     out.println("<html>");
out.println("<HEAD><TITLE>JavaMail Servlet</TITLE></HEAD>");
     out.println("<BODY bgcolor=\"#ccccff\">");
     out.print("<center><font face=\"Arial,Helvetica\" ");
     out.println("font size=\"+3\"><b>");
     out.println("Message " + (msgNum+1) + " in folder " +
          mud.getStore().getURLName() +
          "/INBOX</b></font></center><p>");
     try {
     Message msg = mud.getFolder().getMessage(msgNum);
     // first, display this message's headers
     displayMessageHeaders(mud, msg, out);
     // and now, handle the content
     Object o = msg.getContent();
     //if (o instanceof String) {
     if (msg.isMimeType("text/plain")) {
          out.println("<pre>");
          out.println((String)o);
          out.println("</pre>");
     //} else if (o instanceof Multipart){
     } else if (msg.isMimeType("multipart/*")) {
          Multipart mp = (Multipart)o;
          int cnt = mp.getCount();
          for (int i = 0; i < cnt; i++) {
          displayPart(mud, msgNum, mp.getBodyPart(i), i, req, out);
     } else {
          out.println(msg.getContentType());
     } catch (MessagingException mex) {
     out.println(mex.toString());
     out.println("</BODY></html>");
     out.close();
* This method displays a message part. <code>text/plain</code>
* content parts are displayed inline. For all other parts,
* a URL is generated and displayed; clicking on the URL
* brings up the part in a separate page.
private void displayPart(MailUserData mud, int msgNum, Part part,
               int partNum, HttpServletRequest req,
               ServletOutputStream out)
     throws IOException {
     if (partNum != 0)
     out.println("<p><hr>");
try {
     String sct = part.getContentType();
     if (sct == null) {
          out.println("invalid part");
          return;
     ContentType ct = new ContentType(sct);
     if (partNum != 0)
          out.println("<b>Attachment Type:</b> " +
               ct.getBaseType() + "<br>");
     if (ct.match("text/plain")) {
          // display text/plain inline
          out.println("<pre>");
          out.println((String)part.getContent());
          out.println("</pre>");
     } else {
          // generate a url for this part
          String s;
          if ((s = part.getFileName()) != null)
          out.println("<b>Filename:</b> " + s + "<br>");
          s = null;
          if ((s = part.getDescription()) != null)
          out.println("<b>Description:</b> " + s + "<br>");
          out.println("<a href=\"" +
               HttpUtils.getRequestURL(req) +
               "?message=" +
               msgNum + "&part=" +
               partNum + "\">Display Attachment</a>");
     } catch (MessagingException mex) {
     out.println(mex.toString());
* This method gets the stream from for a given msg part and
* pushes it out to the browser with the correct content type.
* Used to display attachments and relies on the browser's
* content handling capabilities.
private void displayPart(MailUserData mud, int msgNum,
               int partNum, ServletOutputStream out,
               HttpServletResponse res)
     throws IOException {
     Part part = null;
try {
     Message msg = mud.getFolder().getMessage(msgNum);
     Multipart mp = (Multipart)msg.getContent();
     part = mp.getBodyPart(partNum);
     String sct = part.getContentType();
     if (sct == null) {
          out.println("invalid part");
          return;
     ContentType ct = new ContentType(sct);
     res.setContentType(ct.getBaseType());
     InputStream is = part.getInputStream();
     int i;
     while ((i = is.read()) != -1)
          out.write(i);
     out.flush();
     out.close();
     } catch (MessagingException mex) {
     out.println(mex.toString());
* This is a utility message that pretty-prints the message
* headers for message that is being displayed.
private void displayMessageHeaders(MailUserData mud, Message msg,
                    ServletOutputStream out)
     throws IOException {
     try {
     out.println("<b>Date:</b> " + msg.getSentDate() + "<br>");
Address[] fr = msg.getFrom();
if (fr != null) {
boolean tf = true;
out.print("<b>From:</b> ");
for (int i = 0; i < fr.length; i++) {
out.print(((tf) ? " " : ", ") + getDisplayAddress(fr));
tf = false;
out.println("<br>");
Address[] to = msg.getRecipients(Message.RecipientType.TO);
if (to != null) {
boolean tf = true;
out.print("<b>To:</b> ");
for (int i = 0; i < to.length; i++) {
out.print(((tf) ? " " : ", ") + getDisplayAddress(to[i]));
tf = false;
out.println("<br>");
Address[] cc = msg.getRecipients(Message.RecipientType.CC);
if (cc != null) {
boolean cf = true;
out.print("<b>CC:</b> ");
for (int i = 0; i < cc.length; i++) {
out.print(((cf) ? " " : ", ") + getDisplayAddress(cc[i]));
          cf = false;
out.println("<br>");
     out.print("<b>Subject:</b> " +
          ((msg.getSubject() !=null) ? msg.getSubject() : "") +
          "<br>");
} catch (MessagingException mex) {
     out.println(msg.toString());
* This method displays the URL's for the available commands and the
* INBOX headerlist
private void displayHeaders(MailUserData mud,
                    HttpServletRequest req,
ServletOutputStream out)
     throws IOException {
SimpleDateFormat df = new SimpleDateFormat("EE M/d/yy");
out.println("<html>");
out.println("<HEAD><TITLE>JavaMail Servlet</TITLE></HEAD>");
     out.println("<BODY bgcolor=\"#ccccff\"><hr>");
     out.print("<center><font face=\"Arial,Helvetica\" font size=\"+3\">");
     out.println("<b>Folder " + mud.getStore().getURLName() +
          "/INBOX</b></font></center><p>");
     // URL's for the commands that are available
     out.println("<font face=\"Arial,Helvetica\" font size=\"+3\"><b>");
out.println("<a href=\"" +
          HttpUtils.getRequestURL(req) +
          "?logout=true\">Logout</a>");
out.println("<a href=\"" +
          HttpUtils.getRequestURL(req) +
          "?compose=true\" target=\"compose\">Compose</a>");
     out.println("</b></font>");
     out.println("<hr>");
     // List headers in a table
out.print("<table cellpadding=1 cellspacing=1 "); // table
     out.println("width=\"100%\" border=1>"); // settings
     // sender column header
     out.println("<tr><td width=\"25%\" bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Sender</b></font></td>");
     // date column header
     out.println("<td width=\"15%\" bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Date</b></font></td>");
     // subject column header
     out.println("<td bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Subject</b></font></td></tr>");
     try {
     Folder f = mud.getFolder();
     int msgCount = f.getMessageCount();
     Message m = null;
     // for each message, show its headers
     for (int i = 1; i <= msgCount; i++) {
m = f.getMessage(i);
          // if message has the DELETED flag set, don't display it
          if (m.isSet(Flags.Flag.DELETED))
          continue;
          // from
out.println("<tr valigh=middle>");
out.print("<td width=\"25%\" bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
               ((m.getFrom() != null) ?
               m.getFrom()[0].toString() :
               "" ) +
               "</font></td>");
          // date
out.print("<td nowrap width=\"15%\" bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
df.format((m.getSentDate()!=null) ?
                    m.getSentDate() : m.getReceivedDate()) +
               "</font></td>");
          // subject & link
out.print("<td bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
          "<a href=\"" +
               HttpUtils.getRequestURL(req) +
"?message=" +
i + "\">" +
((m.getSubject() != null) ?
               m.getSubject() :
               "<i>No Subject</i>") +
"</a>" +
"</font></td>");
out.println("</tr>");
     } catch (MessagingException mex) {
     out.println("<tr><td>" + mex.toString() + "</td></tr>");
     mex.printStackTrace();
     out.println("</table>");
     out.println("</BODY></html>");
     out.flush();
     out.close();
* This method handles the request when the user hits the
* <i>Compose</i> link. It send the compose form to the browser.
private void compose(MailUserData mud, HttpServletResponse res,
               ServletOutputStream out)
     throws IOException {
     res.setContentType("text/html");
     out.println(composeForm);
     out.close();
* This method processes the send request from the compose form
private void send(HttpServletRequest req, HttpServletResponse res,
          ServletOutputStream out, HttpSession ssn)
     throws IOException {
String to = req.getParameter("to");
     String cc = req.getParameter("cc");
     String subj = req.getParameter("subject");
     String text = req.getParameter("text");
     try {
     MailUserData mud = getMUD(ssn);
     if (mud == null)
          throw new Exception("trying to send, but not logged in");
     Message msg = new MimeMessage(mud.getSession());
     InternetAddress[] toAddrs = null, ccAddrs = null;
     if (to != null) {
          toAddrs = InternetAddress.parse(to, false);
          msg.setRecipients(Message.RecipientType.TO, toAddrs);
     } else
          throw new MessagingException("No \"To\" address specified");
     if (cc != null) {
          ccAddrs = InternetAddress.parse(cc, false);
          msg.setRecipients(Message.RecipientType.CC, ccAddrs);
     if (subj != null)
          msg.setSubject(subj);
     URLName u = mud.getURLName();
     msg.setFrom(new InternetAddress(u.getUsername() + "@" +
                         u.getHost()));
     if (text != null)
          msg.setText(text);
     Transport.send(msg);
     out.println("<h1>Message sent successfully</h1></body></html>");
     out.close();
     } catch (Exception mex) {
     out.println("<h1>Error sending message.</h1>");
     out.println(mex.toString());
     out.println("<br></body></html>");
// utility method; returns a string suitable for msg header display
private String getDisplayAddress(Address a) {
String pers = null;
String addr = null;
if (a instanceof InternetAddress &&
((pers = ((InternetAddress)a).getPersonal()) != null)) {
     addr = pers + " "+"<"+((InternetAddress)a).getAddress()+">";
} else
addr = a.toString();
return addr;
// utility method; retrieve the MailUserData
// from the HttpSession and return it
private MailUserData getMUD(HttpSession ses) throws IOException {
     MailUserData mud = null;
     if (ses == null) {
     return null;
     } else {
     if ((mud = (MailUserData)ses.getValue("javamailservlet")) == null){
          return null;
     return mud;
public String getServletInfo() {
return "A mail reader servlet";
* This is the HTML code for the compose form. Another option would
* have been to use a separate html page.
private static String composeForm = "<HTML><HEAD><TITLE>JavaMail Compose</TITLE></HEAD><BODY BGCOLOR=\"#CCCCFF\"><FORM ACTION=\"/servlet/JavaMailServlet\" METHOD=\"POST\"><input type=\"hidden\" name=\"send\" value=\"send\"><P ALIGN=\"CENTER\"><B><FONT SIZE=\"4\" FACE=\"Verdana, Arial, Helvetica\">JavaMail Compose Message</FONT></B><P><TABLE BORDER=\"0\" WIDTH=\"100%\"><TR><TD WIDTH=\"16%\" HEIGHT=\"22\">     <P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">To:</FONT></B></TD><TD WIDTH=\"84%\" HEIGHT=\"22\"><INPUT TYPE=\"TEXT\" NAME=\"to\" SIZE=\"30\"> <FONT SIZE=\"1\" FACE=\"Verdana, Arial, Helvetica\"> (separate addresses with commas)</FONT></TD></TR><TR><TD WIDTH=\"16%\"><P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">CC:</FONT></B></TD><TD WIDTH=\"84%\"><INPUT TYPE=\"TEXT\" NAME=\"cc\" SIZE=\"30\"> <FONT SIZE=\"1\" FACE=\"Verdana, Arial, Helvetica\"> (separate addresses with commas)</FONT></TD></TR><TR><TD WIDTH=\"16%\"><P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">Subject:</FONT></B></TD><TD WIDTH=\"84%\"><INPUT TYPE=\"TEXT\" NAME=\"subject\" SIZE=\"55\"></TD></TR><TR><TD WIDTH=\"16%\"> </TD><TD WIDTH=\"84%\"><TEXTAREA NAME=\"text\" ROWS=\"15\" COLS=\"53\"></TEXTAREA></TD></TR><TR><TD WIDTH=\"16%\" HEIGHT=\"32\"> </TD><TD WIDTH=\"84%\" HEIGHT=\"32\"><INPUT TYPE=\"SUBMIT\" NAME=\"Send\" VALUE=\"Send\"><INPUT TYPE=\"RESET\" NAME=\"Reset\" VALUE=\"Reset\"></TD></TR></TABLE></FORM></BODY></HTML>";
* This class is used to store session data for each user's session. It
* is stored in the HttpSession.
class MailUserData {
URLName url;
Session session;
Store store;
Folder folder;
public MailUserData(URLName urlname) {
     url = urlname;
public URLName getURLName() {
     return url;
public Session getSession() {
     return session;
public void setSession(Session s) {
     session = s;
public Store getStore() {
     return store;
public void setStore(Store s) {
     store = s;
public Folder getFolder() {
     return folder;
public void setFolder(Folder f) {
     folder = f;

You posted a thousand lines of badly-formatted code and didn't have the sense to say which one had the exception.
My guess is that it was this one:Session session = Session.getDefaultInstance(props, null);because that happened to me. I fixed it by calling getInstance instead of getDefaultInstance.
However if that isn't the problem, how about spending a few seconds to post a less useless question?

Java.lang.Exception:java.security.accesscontrolException:access denied

good afternoon to all experts
i am getting the following exception when i am going to read file
java.lang.Exception:java.security.accesscontrolException:accessdenied(java.io.FilePermission c:\premiji.rar)
my applet as follows
import java.io.*;
import java.applet.*;
import java.awt.*;
import java.security.*;
import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.*;
import java.io.IOException;
public class TestApp extends Applet
     public static TextField t;
     public static String key;
    public Label l;
public void init()
   setBackground(Color.GRAY);
   setLayout(null);
   t=new TextField(" ");
   t.setEchoChar('*');
   l=new Label("Enter ur key");
   l.setBounds(0,2,75,20);
   t.setForeground(Color.RED);
   t.setBounds(78,2,150,20);
add(l);
   add(t);
public static String eFile(String plainFile)throws Exception
{String cFile="c://suri.rar";
     key=t.getText();
    byte[]raw=key.getBytes("UTF8");
    SecretKeySpec skeySpec = new SecretKeySpec(raw, "Blowfish");
    Cipher cipher = Cipher.getInstance("Blowfish");
    Cipher cipher2=Cipher.getInstance("Blowfish");
    cipher2.init(Cipher.DECRYPT_MODE,skeySpec);
    cipher.init(Cipher.ENCRYPT_MODE, skeySpec);
    InputStream fis,dis;
    FileOutputStream fos,dos;
    fis = new FileInputStream("c://premji.rar");
    fis = new javax.crypto.CipherInputStream(fis, cipher);
    fos = new FileOutputStream(cFile);
    byte[] b = new byte[8];
    int i = fis.read(b);
    while (i != -1) {
        fos.write(b, 0, i);
        i = fis.read(b);
dis = new FileInputStream(cFile);
dis = new javax.crypto.CipherInputStream(dis, cipher2);
dos=new FileOutputStream("c://madhu.rar");
byte[] c=new byte[8];
int j=dis.read(c);
while(j!=-1)
     dos.write(c,0,j);
     j=dis.read(c);
   fis.close() ;
   fos.close();
   return cFile;
}my html as follows
html>
<script language="JavaScript">
function pass()
    document.myForm.uname.value=document.myApp.eFile(document.myForm.upfile.value);
</script>
<applet name="myApp" code="TestApp.class" archive="TestApp.jar" width=600 height=80></applet>
<body>
<form name="myForm" >
Name
<input type="text" name="uname"/>
File
<input type="file" name="upfile"/>
<input type=button value="click" onClick="pass();">
<input type="submit"/>
</form>
</body>
</html>note:
i signed my applet like
keytool -genkey -alias sgsits -validity 365
jarsigner TestApp.jar sgsitshave we to modify polacy file also?
if so how & which one modify
any suggestion would be greatly appreciated
thanks in advance

I assume your signature is correct.
Signing the applet enables privileges (like file IO) whenever all the calls on the stack leading
to the sensitive operation (in your case fis = new FileInputStream("c://premji.rar")) originate
from the signed jar. It is not your case, as you come into the applet from javascript.
The solution is to use AccessController.doPrivileged...(). It was designed with this situation in mind.

Signed applet not working in firefox - java.security.AccessControlException

Hello,
I have a signed applet that works fine in IE 7 but in Firefox I'm getting this exception in the java console:
java.security.AccessControlException: access denied (java.net.SocketPermission myhost.com resolve)
I already tried to run the applet with different JRE versions in Firefox with the same result: 1.6.0_01, 1.6.0_02, 1.6.0_03, 1.6.0_05
I'll appreciate your help.

thanx 4 replying
using the browser to view Applet is not recomended that is because if u change the the source-code and recompile the applet then run it using the broswer it will run the old-version
Also i've found the solution here
http://www.cs.utah.edu/classes/cs1021/notes/lecture03/eclipse_help.html

Java.security.AccessControlException: access denied (java.util.PropertyPerm

Hi All,
I try to run an applet from Solaris 8 server on some client machine using IE5 and NetScape 6.2 ( I installed JRE 1.4, I also try other JRE versions) but I get the following errors again and agian,
I even try to use appletviewer on the Solaris Box itself to open the applet but it makes no difference same errors
could somebody please help or give me a hint how should I start tracing what the problem might be ?
this applet comes with Solaris Bandwidth Manager as a gui administration tool ( webbased ) it supposed to change the configurations remotly over the web. I asure there is no solaris permission problem exist.
I use Tomcat on the server side.Installed JDK 1.3 on Solaris 8 with all the default settings.
i suppose something should be done with java.policy or java.security files i know nothing about java security please at least give me some URL's to find out more about this matter i searched a lot but couldn't find good documents about java default security restrictions
java.lang.ExceptionInInitializerError
at com.sun.ba.common.QConfiguration.loadPredefServices(QConfiguration.java:617)
at com.sun.ba.common.QConfiguration.getPredefServices(QConfiguration.java:630)
at com.sun.ba.tool.MainPanel.<init>(MainPanel.java:95)
at com.sun.ba.tool.QoSFrame.<init>(QoSFrame.java:48)
at com.sun.ba.tool.baApplet.init(baApplet.java:46)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission console read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at com.sun.ba.common.QDebug.<clinit>(QDebug.java:39)
... 7 more
any help would be appriciated so much.
thanks
mehmad

I dont know, but It may be that an Applet can only access the local machine. ie. If you run the applet on computer A and you want to edit the config on computer B, I do not believe you can. The applet can only talk to Computer A. You would have to:
1) Run an application on computer A and the applet would tell the application what to change.
2)Maybe sign the applet in a JAR File
You will probably have to do #1.
US101

Java.security.AccessControlException: access denied (java.util.PropertyPer

Hi All,
I try to run an applet from Solaris 8 server on some client machine using IE5 and NetScape 6.2 ( I installed JRE 1.4, I also try other JRE versions) but I get the following errors again and agian,
I even try to use appletviewer on the Solaris Box itself to open the applet but it makes no difference same errors
could somebody please help or give me a hint how should I start tracing what the problem might be ?
this applet comes with Solaris Bandwidth Manager as a gui administration tool ( webbased ) it supposed to change the configurations remotly over the web. I asure there is no solaris permission problem exist.
I use Tomcat on the server side.Installed JDK 1.3 on Solaris 8 with all the default settings.
i suppose something should be done with java.policy or java.security files i know nothing about java security please at least give me some URL's to find out more about this matter i searched a lot but couldn't find good documents about java default security restrictions
java.lang.ExceptionInInitializerError
     at com.sun.ba.common.QConfiguration.loadPredefServices(QConfiguration.java:617)
     at com.sun.ba.common.QConfiguration.getPredefServices(QConfiguration.java:630)
     at com.sun.ba.tool.MainPanel.<init>(MainPanel.java:95)
     at com.sun.ba.tool.QoSFrame.<init>(QoSFrame.java:48)
     at com.sun.ba.tool.baApplet.init(baApplet.java:46)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission console read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
     at java.lang.System.getProperty(Unknown Source)
     at com.sun.ba.common.QDebug.<clinit>(QDebug.java:39)
     ... 7 more
any help would be appriciated so much.
thanks
mehmad

Hi,
Please make changes in the java.security files present in the jdk1.3/lib/jre/security/java.security.There you make the changes in the property which gives you the error.See if this helps..
regards vickyk

Java.security..AccesscontrolException: access denied (java.util.PropertyP..

I am trying to access the Cisco PIX device manager to get access to my firewall, but get the error message above when trying to start the applet: Is this a bug? Thankful for any input! See the Java concole output below:
Java Plug-in 1.5.0_06
Using JRE version 1.5.0_06 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\Kari
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
p: reload proxy configuration
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>
Requesting URL: https://10.1.1.1/jploader.jar
java.security.AccessControlException: access denied (java.util.PropertyPermission java.version read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
     at java.lang.System.getProperty(Unknown Source)
     at com.cisco.pdm.e.c.q(Unknown Source)
     at com.cisco.pdm.e.c.h(Unknown Source)
     at com.cisco.pdm.a.byte(Unknown Source)
     at com.cisco.pdm.PDMApplet.start(Unknown Source)
     at com.cisco.nm.util.sgz.Env.start(Env.java:37)
     at com.cisco.nm.util.sgz.Loader.start(Loader.java:109)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)

I had the same problem trying to open a Pix 506e through Internet Explorer.
After downloading and installing and uninstalling again differt versions; the working solution for me was version JRE 1.4.2_07
Be sure to download the 07, other versions of the 1.4.2 were not working!

Java.security.AccessControlException while trying to run the server app

ok, pretty new with java and rmi, so I wanted to run the application from the sun rmi tutorial
http://java.sun.com/docs/books/tutorial/rmi/TOC.html.
It all builds ok, i run the rmiregistry ,but when i try to run the server i get :
java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:1099 connect,resolve)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
     at java.security.AccessController.checkPermission(AccessController.java:546)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
     at java.lang.SecurityManager.checkConnect(SecurityManager.java:1034)
     at java.net.Socket.connect(Socket.java:513)
     at java.net.Socket.connect(Socket.java:469)
     at java.net.Socket.<init>(Socket.java:366)
     at java.net.Socket.<init>(Socket.java:180)
     at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(RMIDirectSocketFactory.java:22)
     at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(RMIMasterSocketFactory.java:128)
     at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:595)
     at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:198)
     at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:184)
     at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:322)
     at sun.rmi.registry.RegistryImpl_Stub.rebind(Unknown Source)
     at engine.ComputeEngine.main(ComputeEngine.java:30)
what i noticed is that this output is similar to not running rmiregistry at all, so i guess the problem is with the way i'm running rmiregistry
thx in advance

You're running the server with a SecurityManager. There's no need to do that at first. Get rid of it. When you have it working, write yourself a .policy file that grants that permission, and any others you discover it needs, and name that as your security policy file, e.g.
java -Djava.security.policy=my.policy -Djava.security.manager mypackage.MyServer ...

Can't fix a java.security.AccessControlException exception

Hi.
I have a webapp running under j2ee with a ContextListener that performs some initialization tasks.
One of these tasks consists in querying a database and putting the results in a xml file according to an existing xml file that acts as a map for it maps the rows and columns of the result set to elements and attributes in the xml doc (this task is really performed by an EJB that the ContextListener instantiates).
To do this, at some point the EJB tries to instantiate a new org.w3c.dom.Document object pointing to the xml map file witch, like I said, will be used to 'massaje' the data in the query into a xml format.
Here's the revelant portion of the code:
mapDoc = docbuilder.parse(mapfilepath);
When the EJB tries to do this, the following exception is thrown:
java.security.AccessControlException: access denied (java.io.FilePermission c:\j2sdkee1.3.1\public_html\iFAQs\xml\temas-map.xml read)
I've checked the server.policy file and it seems ok, it has a grant section that makes me believe I should have read and write access to all files under public_html:
grant codeBase "file:${com.sun.enterprise.home}/public_html/-" {
permission java.lang.RuntimePermission "loadLibrary.*";
permission java.lang.RuntimePermission "accessClassInPackage.*";
permission java.lang.RuntimePermission "createClassLoader";
permission java.lang.RuntimePermission "queuePrintJob";
permission java.lang.RuntimePermission "modifyThreadGroup";
permission java.io.FilePermission "<<ALL FILES>>", "read,write";
Any help will be much appreciated!
Thanks!
Best regards,
Piponline, Portugal

hi piponline,
thanx for the question details u have specified, part of ur details are used to solve my problem. i have just copied the permissions statements for servlets to j2ee server section in server.pliciy file
bye
kireet

Socket programming + java.security.AccessControlException: access denied

the code below is for a particular port and IP ..what is the command for granting permission for all the sites?
please help, i have been unable to tackle this problem from the past 24 hours.
iam getting an error too..
java.security.AccessControlException: access denied (java.net.SocketPermission yahoo.com resolve)
grant {
permission java.net.SocketPermission
"puffin.eng.sun.com:7777",
"connect, accept";

..

GF 3.1.1 - java.security.AccessControlException: access denied - server.log

I am upgrading an old NB4.1 produced JSP system that runs on Netscape iplanet to NB7.0.1 built JSP system running on Glassfish 3.1.1. I have four main files: login.html, login.jsp, ApplicationRmiConnection, and MenuManager.jsp . Three of four are working. The login.html is only a startup means to be sent to the login.jsp. The ApplicationRmiConnection is a servlet called by the login.jsp. It reads a properties file, establishes connection with the RMI and database (currently on the OLD system (Netscape iplanet)) which it does quite well. After the ApplicationRmiConnection is established and working the MenuManager.jsp . The first output from the MenuManager.jsp is a series of application.log calls for verification of data passed in from the successful ApplicationRmiConnection database read.
How does GF 3.1.1 loose AccessControl permissions to the server.log to which it is writing? All I am using is application.log statements and it coughs, chokes, and quits.
My output stacktrace is:
INFO: PWC1412: WebModule[null] ServletContext.log():ApplicationRmiConnect: getRealPath("/") = [C:\Program Files\glassfish\glassfish-3.1\glassfish\domains\domain1\applications\MyApplication\]
INFO: PWC1412: WebModule[null] ServletContext.log():MenuMgr: sParms - RMI Connect = com.company.rmi.ServerAppClientAdapter@19ca6bc
INFO: PWC1412: WebModule[null] ServletContext.log():MenuMgr: caught an Exception
WARNING: StandardWrapperValve[jsp]: PWC1406: Servlet.service() for servlet jsp threw exception
java.security.AccessControlException: access denied (java.io.FilePermission C:\Program Files\glassfish\glassfish-3.1\glassfish\domains\domain1\logs\server.log read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
at java.security.AccessController.checkPermission(AccessController.java:546)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
at java.io.File.exists(File.java:731)
at com.sun.enterprise.server.logging.GFFileHandler.publish(GFFileHandler.java:676)
at java.util.logging.Logger.log(Logger.java:481)
at com.sun.logging.LogDomains$1.log(LogDomains.java:354)
at java.util.logging.Logger.doLog(Logger.java:503)
at java.util.logging.Logger.logp(Logger.java:619)
at com.sun.enterprise.web.logger.IASLogger.write(IASLogger.java:127)
at com.sun.enterprise.web.logger.LoggerBase.log(LoggerBase.java:190)
at com.sun.enterprise.web.logger.IASLogger.log(IASLogger.java:57)
at org.apache.catalina.core.StandardContext.log(StandardContext.java:6828)
at org.apache.catalina.core.ApplicationContext.log(ApplicationContext.java:449)
at org.apache.catalina.core.ApplicationContextFacade.log(ApplicationContextFacade.java:359)
at org.apache.jsp.MenuMgr_jsp._jspService(MenuMgr_jsp.java from :533)
at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:111)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:403)
at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:492)
at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:378)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
at org.apache.catalina.core.StandardWrapper.service(StandardWrapper.java:1539)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:281)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:655)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:595)
at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:98)
at com.sun.enterprise.web.PESessionLockingStandardPipeline.invoke(PESessionLockingStandardPipeline.java:91)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:162)
at org.apache.catalina.connector.CoyoteAdapter.doService(CoyoteAdapter.java:330)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:231)
at com.sun.enterprise.v3.services.impl.ContainerMapper.service(ContainerMapper.java:174)
at com.sun.grizzly.http.ProcessorTask.invokeAdapter(ProcessorTask.java:828)
at com.sun.grizzly.http.ProcessorTask.doProcess(ProcessorTask.java:725)
at com.sun.grizzly.http.ProcessorTask.process(ProcessorTask.java:1019)
at com.sun.grizzly.http.DefaultProtocolFilter.execute(DefaultProtocolFilter.java:225)
at com.sun.grizzly.DefaultProtocolChain.executeProtocolFilter(DefaultProtocolChain.java:137)
at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:104)
at com.sun.grizzly.DefaultProtocolChain.execute(DefaultProtocolChain.java:90)
at com.sun.grizzly.http.HttpProtocolChain.execute(HttpProtocolChain.java:79)
at com.sun.grizzly.ProtocolChainContextTask.doCall(ProtocolChainContextTask.java:54)
at com.sun.grizzly.SelectionKeyContextTask.call(SelectionKeyContextTask.java:59)
at com.sun.grizzly.ContextTask.run(ContextTask.java:71)
at com.sun.grizzly.util.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:532)
at com.sun.grizzly.util.AbstractThreadPool$Worker.run(AbstractThreadPool.java:513)
at java.lang.Thread.run(Thread.java:662)

The problem area has been found. We need to know the best method to replace the two lines of code we commented out. Here is what we found.
Glassfish 3.1.1 Security does not play well with old RMI security (JDK1.2 vintage). Furthermore, once the old RMI security has messed with the mind of GF3.1.1 security the GF security truly believes it has in some cases no permission to read its own server.log file.
Here is the offending code commented out in the Server Client Adapter (client wrapper):
Note: this is legacy rmi code. i.e. manually executed rmic on the appropriate classfiles as this was originally created for java 1.2.
// if(System.getSecurityManager() == null)
// System.setSecurityManager(new RMISecurityManager());
remote = (com.davisco.rmi.ServerAppServantAdapter_Stub)Naming.lookup(stringbuffer.toString());
A thank you goes out to www.velocityreviews.com/forums/t276590-access-denied-java-lang-runtimepermission-createsecuritymanager.html even if it is five years old.
Again, this is using the original version of RMI. How do we re-implement the RMI Security Manager without offending GF 3.1.1 security?

Re: java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

This looks like it might be a bug in 6.1SP5,
          weblogic/kernel/Kernel.java at line 85.
          It's trying to do the right thing to ignore an exception if in
          an applet but it's ignoring the wrong exception
          (SecurityException, when it looks like the stack
          trace is throwing a java.security.AccessControlException).
          If you need a fix, this would need to go through support
          and be filed as a problem with WLS Core.
          "Ram Gopal" <[email protected]> wrote in message
          news:[email protected]...
          >
          > We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have
          an applet
          > that subscribes to a JMS Topic.
          > The applet is throwing the following exception with SP5:
          >
          > java.lang.ExceptionInInitializerError:
          java.security.AccessControlException: access
          > denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling
          read)
          >
          > at java.security.AccessControlContext.checkPermission(Unknown Source)
          >
          > at java.security.AccessController.checkPermission(Unknown Source)
          >
          > at java.lang.SecurityManager.checkPermission(Unknown Source)
          >
          > at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
          >
          > at java.lang.System.getProperty(Unknown Source)
          >
          > at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
          >
          > at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
          >
          > at
          weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactory
          Delegate.java:166)
          >
          > at java.lang.Class.newInstance0(Native Method)
          >
          > at java.lang.Class.newInstance(Unknown Source)
          >
          > at
          weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFact
          ory.java:147)
          >
          > at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
          >
          > at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
          >
          > at javax.naming.InitialContext.init(Unknown Source)
          >
          > at javax.naming.InitialContext.<init>(Unknown Source)
          >
          > at
          com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.
          java:266)
          >
          > at
          com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstr
          actApplet.java:81)
          >
          > at
          com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:1
          87)
          >
          > at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
          >
          > at sun.applet.AppletPanel.run(Unknown Source)
          >
          > at java.lang.Thread.run(Unknown Source)
          >
          >
          > Any ideas as to what I am missing?
          >
          > Thanks,
          > Ram


I suggest going through customer support, I don't know what
          the resolution was. You might also try the security newsgroup,
          as no JMS code has been called by the application yet at
          the point the exception is thrown.
          Tom
          lee wrote:
          > All:
          > We are upgrading weblogic 6.0 to weblogic 6.1 and encounted exactly the same error. Just wondering if you guys were able to fix the issue with bea.
          >
          > Your response is highly appreciated.
          >
          > Thanks!
          >
          > Li

Java.lang.ExceptionInInitializerError: java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
that
subscribes to a JMS Topic. The applet is throwing the following exception with
SP5:
java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
denied
(java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
at java.lang.Class.newInstance0(Native Method)
at java.lang.Class.newInstance(Unknown Source)
at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
at javax.naming.InitialContext.init(Unknown Source)
at javax.naming.InitialContext.<init>(Unknown Source)
at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Any ideas as to what I am missing?
Thanks,
Ram

Prasad,
It's one thing not to have to modify the security policy on the server,
but on a client and applets have even bigger restrictions this might
very well be the only way since the default applet restrictions would
not allow a lot of permissions granted by default for normal Java
applications.
Dejan
Prasad Peddada wrote:
Deyan D. Bektchiev wrote:
Ram,
You are missing a permission grant in your policy file and the
SecurityManager doesn't allow the code to read that property.
You have either configured a different security manager or have the
wrong file in use.
For applets this file might be in the user's home directory and named
.java.policy
you need to have the following line somethere in it:
grant {
permission java.util.PropertyPermission "*", "read,write";
Which will allow any applet to read and write any JVM property.
Look at Java permissions is you need more info:
http://java.sun.com/j2se/1.3/docs/guide/security/permissions.html
--dejan
Ram Gopal wrote:
We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We
have an applet
that
subscribes to a JMS Topic. The applet is throwing the following
exception with
SP5:
java.lang.ExceptionInInitializerError:
java.security.AccessControlException: access
denied
(java.util.PropertyPermission weblogic.kernel.allowQueueThrottling
read) at java.security.AccessControlContext.checkPermission(Unknown
Source) at java.security.AccessController.checkPermission(Unknown
Source) at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source) at
java.lang.System.getProperty(Unknown Source) at
weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79) at
weblogic.kernel.Kernel.<clinit>(Kernel.java:54) at
weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
at java.lang.Class.newInstance0(Native Method) at
java.lang.Class.newInstance(Unknown Source) at
weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source) at
javax.naming.InitialContext.init(Unknown Source) at
javax.naming.InitialContext.<init>(Unknown Source) at
com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
at
com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
at
com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
at sun.applet.AppletPanel.run(Unknown Source) at
java.lang.Thread.run(Unknown Source)
Any ideas as to what I am missing?
Thanks,
Ram
This is a WLS bug. You shouldn't have to modify security policy.
Please approach support for a fix.
Cheers,
-- Prasad

Java.security.AccessControlException: access denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)

          We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
          that subscribes to a JMS Topic.
          The applet is throwing the following exception with SP5:
          java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
          denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
               at java.security.AccessControlContext.checkPermission(Unknown Source)
               at java.security.AccessController.checkPermission(Unknown Source)
               at java.lang.SecurityManager.checkPermission(Unknown Source)
               at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
               at java.lang.System.getProperty(Unknown Source)
               at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
               at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
               at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
               at java.lang.Class.newInstance0(Native Method)
               at java.lang.Class.newInstance(Unknown Source)
               at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
               at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
               at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
               at javax.naming.InitialContext.init(Unknown Source)
               at javax.naming.InitialContext.<init>(Unknown Source)
               at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
               at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
               at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
               at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
               at sun.applet.AppletPanel.run(Unknown Source)
               at java.lang.Thread.run(Unknown Source)
          Any ideas as to what I am missing?
          Thanks,
          Ram


I don't know what is happening. JMS hasn't been called yet -
          the applet is still setting up its initial context. You might want
          to try posting to the jndi (and perhaps rmi) newsgroup.
          Tom
          Ram Gopal wrote:
          > We are in the process of migrating from Weblogic 6.1 SP2 to SP5. We have an applet
          > that subscribes to a JMS Topic.
          > The applet is throwing the following exception with SP5:
          >
          > java.lang.ExceptionInInitializerError: java.security.AccessControlException: access
          > denied (java.util.PropertyPermission weblogic.kernel.allowQueueThrottling read)
          >
          >      at java.security.AccessControlContext.checkPermission(Unknown Source)
          >
          >      at java.security.AccessController.checkPermission(Unknown Source)
          >
          >      at java.lang.SecurityManager.checkPermission(Unknown Source)
          >
          >      at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
          >
          >      at java.lang.System.getProperty(Unknown Source)
          >
          >      at weblogic.kernel.Kernel.initAllowThrottleProp(Kernel.java:79)
          >
          >      at weblogic.kernel.Kernel.<clinit>(Kernel.java:54)
          >
          >      at weblogic.jndi.WLInitialContextFactoryDelegate.<init>(WLInitialContextFactoryDelegate.java:166)
          >
          >      at java.lang.Class.newInstance0(Native Method)
          >
          >      at java.lang.Class.newInstance(Unknown Source)
          >
          >      at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:147)
          >
          >      at javax.naming.spi.NamingManager.getInitialContext(Unknown Source)
          >
          >      at javax.naming.InitialContext.getDefaultInitCtx(Unknown Source)
          >
          >      at javax.naming.InitialContext.init(Unknown Source)
          >
          >      at javax.naming.InitialContext.<init>(Unknown Source)
          >
          >      at com.fedex.efm.frontend.model.JMSMessageProcessor.<init>(JMSMessageProcessor.java:266)
          >
          >      at com.fedex.efm.frontend.view.EFMAbstractApplet.startMessageProcessor(EFMAbstractApplet.java:81)
          >
          >      at com.fedex.efm.frontend.view.EFMAbstractApplet.start(EFMAbstractApplet.java:187)
          >
          >      at com.fedex.efm.frontend.view.EFMApplet.start(EFMApplet.java:430)
          >
          >      at sun.applet.AppletPanel.run(Unknown Source)
          >
          >      at java.lang.Thread.run(Unknown Source)
          >
          >
          > Any ideas as to what I am missing?
          >
          > Thanks,
          > Ram

Java.security.AccessControlException: access denied

Hi all
While deploying my portal application lots of following exceptions are thrown. Please guide me how I can solve this issue
<Aug 16, 2007 12:27:43 PM PKT> <Warning> <Management> <BEA-400409> <Exception fr
om ApplicationFilePoller while checking for changes in application appsdirDteP
ortal_dir, directory GHQPortal.
java.security.AccessControlException: access denied (java.io.FilePermission D:\b
ea\user_projects\domains\portalDomain\applications\DtePortal\GHQPortal read)
at java.security.AccessControlContext.checkPermission(Ljava.security.Per
mission;)V(AccessControlContext.java:269)
at java.security.AccessController.checkPermission(Ljava.security.Permiss
ion;)V(AccessController.java:401)
at java.lang.SecurityManager.checkPermission(Ljava.security.Permission;)
V(Unknown Source)
at java.lang.SecurityManager.checkRead(Ljava.lang.String;)V(Unknown Sour
ce)
at java.io.File.list()[Ljava.lang.String;(Unknown Source)
        at java.io.File.list(Ljava.io.FilenameFilter;)[Ljava.lang.String;(Unknow
n Source)
        at com.bea.p13n.management.ApplicationFilePoller.searchDirs(Ljava.lang.S
tring;Ljava.util.Map;)V(ApplicationFilePoller.java:719)
        at com.bea.p13n.management.ApplicationFilePoller.searchDirs()Ljava.util.
Map;(ApplicationFilePoller.java:708)
        at com.bea.p13n.management.ApplicationFilePoller.check()V(ApplicationFil
ePoller.java:671)
        at com.bea.p13n.management.ApplicationFilePoller.access$200(Lcom.bea.p13
n.management.ApplicationFilePoller;)V(ApplicationFilePoller.java:145)
        at com.bea.p13n.management.ApplicationFilePoller$PollerThread.checkAllPo
llers()V(ApplicationFilePoller.java:997)
        at com.bea.p13n.management.ApplicationFilePoller$PollerThread.run()V(App
licationFilePoller.java:953)
        at java.lang.Thread.run()V(Unknown Source)
        at java.lang.Thread.startThreadFromVM(Ljava.lang.Thread;)V(Unknown Sourc
e)
Thanks

Hi
Thanks for reply bposner. I am using 'weblogic' user to deploy the application. Please help me to dig out this problem.
This problem seems linked with Java Security manager. How can I disable Java Security Manager or what permission should I add in security file to resolve this problem.
Thanks
Edited by arafique393 at 08/16/2007 11:23 PM
Edited by arafique393 at 08/17/2007 4:47 AM

Java.security.AccessControlException; com.ms.security.SecurityExceptionEx

Similar Messages

Maybe you are looking for