Java.security.AccessControlException when calling web service from applet

I have an applet that calls a webservce (Xmethods' delayed stock quote service). When I run the applet in appletviewer, I get the following:
[SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.security.AccessControlException: access denied (java.net.SocketPermission 66.28.98.121:9090 connect,resolve); targetException=java.lang.IllegalArgumentException:
Error opening socket: java.security.AccessControlException:
access denied
etc.....
My code works fine as an application, but not as an applet. (This was after I eventually had to extract the necessary SOAP .jar files into the same directory as my applet, but that's another topic...or maybe not?)
Help!
Regards,
John Kirksey

The default security settings does not give an applet to connect to any other server apart from the one from which it was downloaded. This is your problem. To mitigate that you have to change the security setting of the applet conatiner i.e the JVM in the browser.
Ironluca

Similar Messages

Exception when calling web service from Oracle forms 10g

Hi All,
I am trying to integrate Oracle Forms 10g(V 10.1.2.0.2.) with Web Services.
There is a java class named 'authenticate' which is generated using Oracle JDeveloper.
This class is included in the forms application by using "Import Java Class" feature.
Forms built the following funtion based on that class:
-- Method: authenticate (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
FUNCTION authenticate(
obj ORA_JAVA.JOBJECT,
a0 VARCHAR2,
a1 VARCHAR2) RETURN VARCHAR2 IS
BEGIN
args := JNI.CREATE_ARG_LIST(2);
JNI.ADD_STRING_ARG(args, a0);
JNI.ADD_STRING_ARG(args, a1);
message('here1');
RETURN JNI.CALL_STRING_METHOD(FALSE, obj, 'mypackage/AuthenticatorWebServiceServiceStub',
'authenticate', '(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;', args);
message('here2');
END;
However when the above code is invoked it shows the message 'here1' on the form and then throws the following exception: java.lang.Exception: java.lang.ClassCastException
Please suggest me what's wrong with the code. I appreciate your time and help.
Thanks,
Scott.

My primary skill is PL/SQL but the only information I found on Oracle's site to call a web service from a 10g Form was creating a jar file and importing the java class. Since I don't want to ask our corporate IT to make changes on the UNIX box for the jar files I went a different route.
I use UTL_HTTP.BEGIN_REQUEST to call a URL then load I load the data to a table as a CLOB since we have more than 4000 characters. Now I need to parse the XML and load it into a form. I have never done this so if there is a helpful site please let me know. I have looked at several sites but none do what I want.
Thanks

Security issues with calling web services from within Oracle?

I'd like to use a trigger to initiate pushing data to a web service, so I thought we should call the web service from PL/SQL in a DBMS job, or perhaps create a .NET stored proc to call the service. Our DB Lead is concerned about security, since the standard model is for clients to call the database, and not for the database to function as a client.
Does this pose any security risk? Can you refer me to any best practices or articles on this?
Thanks in advance.
Edited by: Kit.net on Nov 9, 2010 11:28 AM

First, a trigger is there to for a single sole purpose - guaranteeing the integrity of the data and the transaction. It is not there to interact with external services and processes (like mail, web and other services). Doing that exposes the transaction to those other processes/services. The transaction can now fail. not because of a business rule validation, but because of a network error when the trigger accesses an external service. How on earth can a business transaction fail when the transaction is valid, but a the transaction's trigger hit an external access error!?
And what happens do that event you have fired off in the trigger, when the transaction is rolled back? How do you undo that event you have created in the trigger that was based on uncommitted data?
So using a trigger like this is simply stupid (and yes, I have seen it too often in practice with horrible results to sugarcoat such an idiotic approach).
As for calling a web service from the database, using the database as the client in such a case. This is not a security risk. This is not unusual. In fact, it is very common in my experience. We have a lot of databases, ranging from SE to EE and several RAC clusters. All of them function as a client at some stage during processing. Some use a db link - and as a client fire off a SQL via that db link to a database server to obtain data. Some use ftp and act as a ftp clients, transferring processed data (XML format) to a server. Some call web services to extract data from 3rd party systems to reconcile the differences between local data sets and 3rd party data sets..
This is common between server and server. I do not see anything unusual in the database server using another server (and acting as a client when it does). Security between servers should not be a major problem (in fact, it can easily be done in a very robust way using trusted and encrypted communication).
The problem occurs when a client connects to the server and client and server roles are swapped at some stage (like the server "writing" a file directly to the client's filesystem). This very seldom makes any sense. And this is where authentication and security become an issue.

Error received when calling web service from database.

Hi folks,
I am trying to call a web service from the database (using the Oracle database web services call-out utility) and I am getting the following error:
ERROR at line 1:
ORA-29532: Java call terminated by uncaught Java exception:
java.rmi.RemoteException:
oracle.j2ee.ws.common.encoding.DeserializationException:unknown prefix in QName
literal: null
ORA-06512: at "SCOTT.PENALTY_ALG_WS_WRAPPER", line 1
ORA-06512: at "SCOTT.ABC_PROC", line 131
ORA-06512: at line 1
This is the error I see in the trace file on the database:
*** 2009-11-10 11:30:37.353
java.rmi.RemoteException: oracle.j2ee.ws.common.encoding.DeserializationException:unknown prefix in QName literal: null
     at oracle.j2ee.ws.common.encoding.simpletype.XSDQNameEncoder.stringToObject(XSDQNameEncoder.java:75)
     at oracle.j2ee.ws.common.encoding.SimpleTypeSerializer.deserialize(SimpleTypeSerializer.java:141)
     at oracle.j2ee.ws.common.encoding.SOAPFaultInfoSerializer.doDeserializeSOAP11(SOAPFaultInfoSerializer.java:120)
     at oracle.j2ee.ws.common.encoding.SOAPFaultInfoSerializer.doDeserialize(SOAPFaultInfoSerializer.java:94)
     at oracle.j2ee.ws.common.encoding.ObjectSerializerBase.deserialize(ObjectSerializerBase.java:180)
     at oracle.j2ee.ws.client.StreamingSender._readBodyFaultElement(StreamingSender.java:513)
     at oracle.j2ee.ws.client.StreamingSender._sendImpl(StreamingSender.java:321)
     at oracle.j2ee.ws.client.StreamingSender._send(StreamingSender.java:112)
     at genproxy.runtime.PenaltyAlgBPELProcessBinding_Stub.process(genproxy.runtime.PenaltyAlgBPELProcessBinding_Stub:80)
     at genproxy.PenaltyAlgBPELProcessPortClient.process(PenaltyAlgBPELProcessPortClient.java:40)
     at genproxy.PenaltyAlgBPELProcessPortClientJPub.process(PenaltyAlgBPELProcessPortClientJPub.java:46)
This web service is deployed on Oracle app server 10.1.3.4. It calls a BPEL process which in turn calls Oracle Business Rules.
I used JPublisher to create the stubs for the web service and load them into the database.
Any ideas on what might be causing this error?
Thanks.
Kashif

Well, I think so... I've followed all the steps, and my merged WSDL file seems like the one in page 12...
Any suggestion, please?
Thank you,

Error when calling Web Service from Adobe Form

Hi all,
I need to invoke a Web Service from my Adobe Interactive Form. I have merged the WSDL files, following the steps in this document:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/148ec26e-0c01-0010-e488-decaafae3b26
But when I press the corresponding button in order to call the web service, I get the following error:
"Error trying to read file.
http://<my_host>:51000/<my_WS>/Config1?style=document"
It seems to be an error in my configuration, because I'm sure that I have followed all steps in the previous PDF.
Any idea?
Thanks.

Well, I think so... I've followed all the steps, and my merged WSDL file seems like the one in page 12...
Any suggestion, please?
Thank you,

Calling web service from applet

Hi,
I am trying to consume a .NET web service from a java applet. I use JDev9i and I generated a clientside-stub...
It works fine in the development environnement, but I get this exception when executing from browser:
java.lang.ExceptionInInitializerError: java.security.AccessControlException: access denied (java.util.PropertyPermission * read,write)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertiesAccess(Unknown Source)
     at java.lang.System.getProperties(Unknown Source)
     at oracle.soap.transport.http.OracleSOAPHTTPConnection.<clinit>(OracleSOAPHTTPConnection.java:105)
     at AppletPackage.Service1Stub.<init>(Service1Stub.java:23)
I replaceOracleSOAPHTTPConnection with SoapHTTPConnection, but then I get the same exception when trying to execute
requestBodyEntries.addElement(toElement(wrappingName, targetNamespace, requestData)); (in the stub)
Is there anything wrong with the methods of the Oracle packages that could cause security problems?

Nope, the problem is that the webservice impl is trying to get all system properties and this is a restricted operation for applets. Seems like every single api impl done by oracle is not usable from applets, unless you sign them. I've tried webservices, xml and jndi.. all of them rely on system properties

Can Call Web Service from Applet?

Can we call a .NET Web Service from an Applet?.
Please help me.

if the Applet has been downloaded from the same web server where the web service runs, pretty easily. else, you might have to sign the applet.
just build the XML messages .NET is expecting, post them to the server and process the response.
you can try using JAXM but i am not sure the messages it produces will be digested by .NET - just try!

How to transfer username when calling web service from PI?

Hi
I have a scenario where a front end application is calling a web service exposed by PI 7.11 and PI is forwarding the call to the backend web service. That is, a SOAP sender adapter and a soap receiver adapter.
Now, I would like to transfer the username, which the PI exposed web service is called with, to the backend web service.
I previously did this by using a UDF where I picked up the username like this and mapped the username to a field in the request message when calling the backend web service:
DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
DynamicConfigurationKey key = DynamicConfigurationKey.create("http://sap.com/xi/XI/System/SOAP", "SRemoteUser");
String WSuser = conf.get(key);
return WSuser;
However, I would like to avoid this method and in stead e.g. use either a query string like http://xxxxx:6571/ISBWS/soap/ISBCore?username=mikael or maybe transfer the username in the http header in some way.
So my question is: what are my options and how do I set it up?
BR MIkael

Apparenty sending user name details in query string is not best practice in webservice. Thats why WSDL does not cover user credentials inside. Webservice deals with message level security , transport level security, encryption , certificate authentication , username token etc
If you want to use http query string in the soap receiver target url try as below and see how that helps... somthing as below..
example: http://host:port/jsppage?userid=test or use xslt mapping or java mapping create soap header as you want and specify username over there.

Calling web service from MBean weblogic cannot find type mapping file

When calling web service from custom MBean i get java.io.IOException.
java.io.IOException: unable to find the type mapping resource file for:
net.msl.sfx.ebooking.client.BookingPartiesServiceService
at weblogic.webservice.core.encoding.DefaultRegistry.<init>(DefaultRegis
try.java:67)
at weblogic.webservice.core.rpc.ServiceImpl.<init>(ServiceImpl.java:83)
at net.msl.sfx.ebooking.client.BookingPartiesServiceService_Impl.<init>(
BookingPartiesServiceService_Impl.java:22)
at net.msl.sfx.ebooking.service.EBookingService.getBookingParties(EBooki
ngService.java:59)
The types.xml file is placed in same jar file as the classes such as net.msl.sfx.ebooking.client.BookingPartiesServiceService_Impl.
When calling the same class/method from a EJB, everything works fine and the web service is called.

i am having the same problem.
Do you have a solution now?
Thanks

ORA-28868 error when calling Web service over HTTPS from PL/SQL utl_http

I am getting error message ORA-28868 error when calling Web service over HTTPS from PL/SQL utl_http PL/SQL package,
when browsed through some of the messages they point to setting Oracle Wallet Manager.
I am trying to connect
Any idea on how to resolve this issue ?
your input is appreciated.
Thanks
Ravi

Duplicate post ... please ignore.

How do i call web services from SAP ABAP

Hello,
Ian working with .net team. they are using sap .net Connector to connect SAP. But my job is In SAP side when Purchase Requisition is created, I have to call web services from ABAP and i have to pass the Purchase Requisition number to web service(.net Program). Please help me how to call web services from ABAP and how to pass value. Any one help me with example.
Thanks
RaviKumar

Hi Ravi,
If you can call EJB from ABAP and from EJB call Web service which you want to call. I am giving code to write in EJB business method processFunction.
public void processFunction(Function function) {
   IRepository repository;
   repository = new Repository("TestRepository");
   JCO.MetaData fmeta = new JCO.MetaData("ZTEST_EJB");
   fmeta.addInfo("REQUTEXT", JCO.TYPE_CHAR, 255,   0, 0,
   JCO.IMPORT_PARAMETER, null);
   fmeta.addInfo("ECHOTEXT", JCO.TYPE_CHAR, 255,   0, 0,
   JCO.EXPORT_PARAMETER, null);
   fmeta.addInfo("RESPTEXT", JCO.TYPE_CHAR, 255,   0, 0,
   JCO.EXPORT_PARAMETER, null);
   repository.addFunctionInterfaceToCache(fmeta);
   JCO.ParameterList input =
   function.getImportParameterList();
   JCO.ParameterList output =
   function.getExportParameterList();
   JCO.ParameterList tables =
   function.getTableParameterList();
if (function.getName().equals("ZTEST_EJB")) {
                    output.setValue(input.getCharArray("REQUTEXT"),"ECHOTEXT");
output.setValue("This is a response " + table.getString("E_NAME") +" " + output.getName(1), "RESPTEXT");
else if (function.getName().equals("STFC_STRUCTURE")) {
JCO.Structure sin = input.getStructure("IMPORTSTRUCT");
JCO.Structure sout = (JCO.Structure)sin.clone();
try {
      System.out.println(sin);
   catch (Exception ex) {
       System.out.println(ex);
                    output.setValue(sout,"ECHOSTRUCT");
output.setValue("This is a response from Example5.java","RESPTEXT");
}//if
Here REQUTEXT, ECHOTEXT are import parameter and RESPTEXT is the Export parameter of Function module ZTEST_EJB in SAP.
Here from this bisuness method you can call web service which you want and give back the result of webservice to ABAP F.M.
Regards,
Bhavik

How to call web services from PL/SQL?

Hi,
Can one help in how to call web services from PL/SQL? Steps, pros and cons, etc....
Thanks in advance

Here's some example skeleton code to get you started...
PROCEDURE p_soap_request(p_username IN VARCHAR2, p_password IN VARCHAR2, p_proxy IN VARCHAR2) IS
    soap_request VARCHAR2(30000);
    soap_respond CLOB;
    http_req      utl_http.req;
    http_resp     utl_http.resp;
    resp          XMLType;
    soap_err      exception;
    v_code        VARCHAR2(200);
    v_msg         VARCHAR2(1800);
    v_len number;
    v_txt Varchar2(32767);
BEGIN
    UTL_HTTP.SET_PROXY(p_proxy);
    -- Define the SOAP request according the the definition of the web service being called
    soap_request:= '<?xml version = "1.0" encoding = "UTF-8"?>'||
                   '<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">'||
                   ' <SOAP-ENV:Body>'||
                   '    <m:DownloadRequest xmlns:m="http://www.website.net/messages/GetDetails">'||
                   '      <m:UserName>'||p_username||'</m:UserName>'||
                   '      <m:Password>'||p_password||'</m:Password>'||
                   '    </m:DownloadRequest>'||
                   ' </SOAP-ENV:Body>'||
                   '</SOAP-ENV:Envelope>';
    http_req:= utl_http.begin_request
              ( 'http://www.website.net/webservices/GetDetailsService.asmx'
              , 'POST'
              , 'HTTP/1.1'
    utl_http.set_header(http_req, 'Content-Type', 'text/xml');
    utl_http.set_header(http_req, 'Content-Length', length(soap_request));
    utl_http.set_header(http_req, 'Download', ''); -- header requirements of particular web service
    utl_http.write_text(http_req, soap_request);
    http_resp:= utl_http.get_response(http_req);
    utl_http.get_header_by_name(http_resp, 'Content-Length', v_len, 1); -- Obtain the length of the response
    FOR i in 1..CEIL(v_len/32767) -- obtain response in 32K blocks just in case it is greater than 32K
    LOOP
        utl_http.read_text(http_resp, v_txt, case when i < CEIL(v_len/32767) then 32767 else mod(v_len,32767) end);
        soap_respond := soap_respond || v_txt; -- build up CLOB
    END LOOP;
    utl_http.end_response(http_resp);
    resp:= XMLType.createXML(soap_respond); -- Convert CLOB to XMLTYPE
END;Using secure web services (https)...
Web serivces call in Plsql
As for 'pros and cons'... there's nothing to compare against... either you want to call a web service or you don't.

Calling Web Service from CRM using proxy

Hi all,
I'm facing a problem trying to call a web service from CRM (WAS 620) via XI 3.0. The response that XI recieves from the web service contains SOAP Envelope, and the mapping fails because of it. I built the proxy manually, because if I load WSDL the proxy generation in CRM generates error that sais that external definition coudn't be used.
Is there any way to remove SOAP envelope from the response while mapping?
Is it possible to call web service from WAS 620?
Thanks!!!!
Anya.

Hi Manish,
SOAP adapter does pass the message to XI (this message contains SOAP envelope although XI expects to get message without it), and during the mapping step i get "Runtime Exception in Message-Mapping transformatio~".
I suppose it's because i created proxy manually. I did so because when i imported WSDL, and tried to generate proxy in CRM, i got an error message that said that proxy couldn't be generated because external definitions are only allowed in XI 3. But my XI version is 3.0! And when I generate the same proxy in my R/3 system that is installed on WAS 640, it works.
What can I do?
Cheers,
Anya.

Calling web Service from the Custom Adapter.Is it Possible?

Hi Experts,
I am having requirment in which i have to cal com.sap.aii.mapping.lookup.LookupService for calling web Service from the Custom Adapter.Is it Possible?
Regards,
Rajesh.D

Hi Rajesh..
Just looking the problem in another angle.. if there is no constraint that you have to use XI specific API to call the web service, why dont you use usual Java API used for calling a web service inside you custom adapter (I have Microsoft background.. donno exactly how it is done in Java,, but in .NET kind of a language it is possible). SInce your adapter is in Java itself and is capable of calling web service.. collect or lookup the data whatever you want and validate...
Just a thought..
VJ

Is it possible to call web service from ABAP SAP 4.6 c..If yes how

Hi Friends,
Is it possible to call web service from ABAP-SAP 4.6 c..If yes Could you please let me know how.
Thanks in Advance.
Murali Krishna K
Edited by: Murali Krishna Kakarla on Jan 26, 2008 7:09 PM
Edited by: Murali Krishna Kakarla on Jan 26, 2008 7:11 PM

Olivier CHRETIEN wrote:>
> Hi Terry,
>
> So these function modules must use the SAPHTTPA RFC destination which uses the exe saphttp.exe ?
>
> How much abap code lines do you have for a web service call ?
> Do you have to code the call specifically for each different web service ?
> Are you able to use the WSDL ?
>
> Nice job if you have coded your own private SOAP runtime !
>
> But I don't think this is an easy solution for everybody...
>
> Regards,
>
> Olivier
Yes, SAPHTTPA (runs on application server) and/or SAPHTTP (runs on front-end pc), one of which, is required for HTTP communication. So far, nothing too elaborate as far as SOAP goes, but the logic is simplistic. Here's some sample code:
DEST = 'SAPHTTPA'.
TRANSLATE HOST TO LOWER CASE.
MYURL = 'wssrvTest/Service.asmx/GetByOrderItem'.
CONCATENATE HOST MYURL INTO MYURL.
REQUEST_HEADERS-DATA =
              'Content-type: application/x-www-form-urlencoded'.
APPEND REQUEST_HEADERS.
CLEAR REQUEST_HEADERS.
*........Convert Order Number to External Format........................
CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
       EXPORTING
            INPUT = ORDER
       IMPORTING
            OUTPUT = ORDER.
*........Convert Item Number to External Format.........................
CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
       EXPORTING
            INPUT = ITEM
       IMPORTING
            OUTPUT = ITEM.
*........Convert Material Number to External Format.....................
CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
       EXPORTING
            INPUT = MATERIAL
       IMPORTING
            OUTPUT = MATERIAL.
CONCATENATE 'sOrder=' ORDER
               INTO REQUEST_BODY-DATA.
APPEND REQUEST_BODY.
CLEAR REQUEST_BODY.
CONCATENATE '&sItem=' ITEM
               INTO REQUEST_BODY-DATA.
APPEND REQUEST_BODY.
CLEAR REQUEST_BODY.
CONCATENATE '&sMaterial=' MATERIAL
              INTO REQUEST_BODY-DATA.
APPEND REQUEST_BODY.
CLEAR REQUEST_BODY.
CALL FUNCTION 'HTTP_POST'
       EXPORTING
            ABSOLUTE_URI          = MYURL
            RFC_DESTINATION       = DEST
            BLANKSTOCRLF          = 'X'
       TABLES
            RESPONSE_ENTITY_BODY = RESPONSE_BODY
            REQUEST_ENTITY_BODY   = REQUEST_BODY
            RESPONSE_HEADERS      = RESPONSE_HEADERS
            REQUEST_HEADERS       = REQUEST_HEADERS
       EXCEPTIONS
            CONNECT_FAILED        = 1
            TIMEOUT               = 2
            INTERNAL_ERROR        = 3
            TCPIP_ERROR           = 4
            DATA_ERROR            = 5
            SYSTEM_FAILURE        = 6
            COMMUNICATION_FAILURE = 7
            OTHERS                = 8.
CHECK SY-SUBRC = 0. "more appropriate msg goes here
LOOP AT RESPONSE_BODY.
    IF RESPONSE_BODY+0(7) <> '<string' AND
       RESPONSE_BODY+0(8) <> '</string' AND
       RESPONSE_BODY+0(5) <> '<?xml'.
      SPLIT RESPONSE_BODY-DATA AT '=' INTO FIELD_NAME FIELD_VALUE.
      TRANSLATE FIELD_NAME TO UPPER CASE.
      CASE FIELD_NAME.
        WHEN 'HEIGHT'.
          HEIGHT = FIELD_VALUE.
        WHEN 'WIDTH'.
          WIDTH = FIELD_VALUE.
        WHEN 'LENGTH'.
          LENGTH = FIELD_VALUE.
        WHEN 'WEIGHT'.
          WEIGHT = FIELD_VALUE.
        WHEN 'QTY'.
          QTY = FIELD_VALUE.
      ENDCASE.
    ENDIF.
ENDLOOP.
Hope this helps...
Terry
Edited by: Terry West on Feb 4, 2008 3:08 PM

Java.security.AccessControlException when calling web service from applet

Similar Messages

Maybe you are looking for