Permissions for connecting to Microsoft SQLServer???

Question

Hi all!
I've looked everywhere for a solution to my problem. I have a RMI-server serving as a middle layer between a MSSQLServer and a javaws client. I'm using a JDBC driver from Microsoft to connect to MSSQL. When having a policy file declaring java.lang.security.AllPermissioneverything runs perfectly. This is however not acceptable in terms of security so I began adding the policies that would specify what the RMI-server was allowed to do.
Now I'm stuck on what grants are needed for making connections to the MSSQLServer (the RMI-server & MSSQL is located on different machines but are on the same intranet). After a day of trial & error I've given up. This is the exception thrown when trying to establish a connection to the database:
java.sql.SQLException: [Microsoft][SQLServer 2000 Driver for JDBC]Error opening/
loading com.microsoft.util.transliteration.properties.
at com.microsoft.jdbc.base.BaseExceptions.createException(Unknown Source
at com.microsoft.jdbc.base.BaseExceptions.getException(Unknown Source)
at com.microsoft.jdbc.sqlserver.tds.TDSConnection.setNonUnicodeTranslite
rator(Unknown Source)
at com.microsoft.jdbc.sqlserver.tds.TDSConnection.setSQLCollation(Unknow
n Source)
at com.microsoft.jdbc.sqlserver.tds.TDSRequest.processEnvChange(Unknown
Source)
at com.microsoft.jdbc.sqlserver.tds.TDSRequest.processReplyToken(Unknown
Source)
at com.microsoft.jdbc.sqlserver.tds.TDSLoginRequest.processReplyToken(Un
known Source)
at com.microsoft.jdbc.sqlserver.tds.TDSRequest.processReply(Unknown Sour
ce)
at com.microsoft.jdbc.sqlserver.SQLServerImplConnection.open(Unknown Sou
rce)
at com.microsoft.jdbc.base.BaseConnection.getNewImplConnection(Unknown S
ource)
at com.microsoft.jdbc.base.BaseConnection.open(Unknown Source)
at com.microsoft.jdbc.base.BaseDriver.connect(Unknown Source)
at java.sql.DriverManager.getConnection(DriverManager.java:512)
at java.sql.DriverManager.getConnection(DriverManager.java:171)
at jflex.admin.DBManager.connectToServer(DBManager.java:71)
at jflex.admin.DBManager.initDB(DBManager.java:39)
at jflex.rmi.RMIValidation.isValidUser(RMIValidation.java:97)
at jflex.rmi.RMIValidation.execute(RMIValidation.java:81)
at jflexserver.JFlexServer.runService(JFlexServer.java:86)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:261)
at sun.rmi.transport.Transport$1.run(Transport.java:148)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:144)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:4
60)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport
.java:701)
at java.lang.Thread.run(Thread.java:536)
This is my latest version of the policy file:
grant {
//Provide access the loggin made by Syslog
permission java.io.FilePermission "syslog.xml", "read";
permission java.io.FilePermission "logs\\*","write, delete";
permission java.util.PropertyPermission "Syslog.classloader.warning", "read";
permission java.util.PropertyPermission "Syslog.level", "read";
permission java.util.PropertyPermission "Syslog.file", "read";
permission java.util.PropertyPermission "Syslog.config.xml", "read";
permission java.util.PropertyPermission "user.dir", "read";
permission java.util.PropertyPermission "Syslog.xml.parser", "read";
permission java.lang.RuntimePermission "getClassLoader";
//Properties needed by RMI
permission java.util.PropertyPermission "java.rmi.server.hostname", "read";
permission java.util.PropertyPermission "java.rmi.server.codebase", "read";
permission java.lang.RuntimePermission "setFactory";
permission java.net.SocketPermission "localhost:1098-1099", "connect,resolve";
permission java.net.SocketPermission "ourdomain.net:8080", "connect,resolve";
permission java.net.SocketPermission "localhost:*", "accept,resolve";
permission java.net.SocketPermission "ourIP:*", "accept,resolve";
permission java.net.SocketPermission "localhost:1098-1099", "connect,resolve";
//Allow access to the db
permission java.net.SocketPermission "192.168.0.2:1433", "accept, resolve, connect";
permission java.net.SocketPermission "SERVER_NAME:1433", "accept, resolve, connect";
permission java.lang.RuntimePermission "accessClassInPackage.com.microsoft.jdbc.sqlserver.SQLServerDriver";
permission java.lang.ReflectPermission "suppressAccessChecks";
permission java.util.PropertyPermission "jdbc.drivers", "read";
permission java.lang.RuntimePermission "accessClassInPackage.com.microsoft.*";
permission java.lang.RuntimePermission "accessClassInPackage.java.sql.*";
permission java.lang.RuntimePermission "loadLibrary.java.sql.DriverManager";
permission java.lang.RuntimePermission "loadLibrary.*";
permission java.util.PropertyPermission "file.encoding", "read";
permission java.sql.SQLPermission "setLog";
permission java.net.SocketPermission "localhost", "accept, connect, listen, resolve";
permission java.util.PropertyPermission "java.naming.*", "read,write";
permission java.io.FilePermission "C:\\Documents and Settings\\Tomcat.SEAFLEX\\Local
settings\\Temp\\-","read,write,delete";
//************* TRIAL AND ERROR ***************************************************
//permission java.security.AllPermission;
permission java.lang.RuntimePermission "modifyThread";
permission java.lang.RuntimePermission "modifyThreadGroup";
permission java.net.SocketPermission "*.microsoft.com:0-65535","connect";
See my frustration? I can't documentation on this anywhere. Please save me!

Answer 1

You should put one permission in the policy file:
permission java.io.FilePermission "c:\\MSSQLJDBC\\lib\\-", "read";
"c:\\MSSQLJDBC\\lib\\-" is the location of your MSSQL jar files:
msbase.jar;msutil.jar;mssqlserver.jar
good luck