Programmatically write rmi.policy not working

Question

Hello there,
I am trying to write rmi.policy programatically in my server class. I tried these options,
System.setProperty("java.security.policy","C:\\Program Files\\eclipse\\security\\rmi.policy"); also
Properties p = System.getProperties();
p.setProperty("java.security.policy","C:\\Program Files\\eclipse\\security\\rmi.policy"); but it is giving me this error,
java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:1099 connect,resolve)my propeties file is
grant {
    permission java.net.SocketPermission "*:1024-65535",
        "connect,accept";
    permission java.net.SocketPermission "*:80", "connect";
};Could you please let me know the solution for this?
Actually I dont want to write any rmi.policy file how can I hardcode all security permissions in my server class itself?
Thnaks
Sat'n

Answer 1

You don't need to write a security policy at all. I didn't want to bother with a policy file, so I just extended the java.lang.SecurityManager class. It allows much more control
Here's a sample class:
public class MySecurityManager extends SecurityManager {
public void checkPermission(Permission perm) {
   if (perm instanceof ReflectPermission)  return;
   if (perm instanceof SerializablePermission) return;
    if (perm instanceof FilePermission) {
          FilePermission fileperm=(FilePermission) perm;
          String filename=fileperm.getName();
          String test = fileperm.getActions();
                //don't allow files to be deleted
         if (test.indexOf("delete")==-1) return;
     //throw a security exception for anything you don't want to allow
     throw new SecurityException("access?"+perm.getClass().toString()+":"+ perm.getName());
public void checkRead(FileDescriptor fd) {
    public void checkRead(String file, Object context) {
}You basically want to have empty methods for anything you want to allow (in the security manager class, the default is to throw a security exception). Take a look at the javadoc for SecurityManager & decide what methods you want to allow. The class above allows all read access to a file. It doesn't allow files to be deleted. There are certain permissions, like reflect permission, that you have to allow in order for program to run!
Play around with it, by setting the security Manager equal to an instance of the MySecurityManager.