Putting images in an applet - java.security.AccessControlException

So I made this Blackjack game using many many classes and a GUI and it worked fine. I then decided to put it online and turned it into an applet. This isn't my first applet that i've put online, so I know that I did all the syntax in the code right. On the other hand, this is the first applet i've put online that includes pictures. The game has a Card class with an ImageIcon variable for the image of the card. The problem is that the applet won't run in a browser, and I receive the follow exception:
java.security.AccessControlException: access denied (java.io.FilePermission Back.png read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkRead(Unknown Source)
     at sun.awt.SunToolkit.getImageFromHash(Unknown Source)
     at sun.awt.SunToolkit.getImage(Unknown Source)
     at javax.swing.ImageIcon.<init>(Unknown Source)
     at javax.swing.ImageIcon.<init>(Unknown Source)
     at CardPanel.<init>(CardPanel.java:34)
     at Dealer.<init>(Dealer.java:75)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
     at java.lang.reflect.Constructor.newInstance(Unknown Source)
     at java.lang.Class.newInstance0(Unknown Source)
     at java.lang.Class.newInstance(Unknown Source)
     at sun.applet.AppletPanel.createApplet(Unknown Source)
     at sun.plugin.AppletViewer.createApplet(Unknown Source)
     at sun.applet.AppletPanel.runLoader(Unknown Source)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
"Back.png" refers to a picture of the back of the card. I have this picture, along with the other 52 card pictures uploaded to the website (i'm hosting on Netfirms). Please help me. I'm willing to share any necessary source code if the need arises.

You're trying to read the images off the local hard drive or from a server other than the one the applet came from.
That's normally not allowed.
Use Class.getResource and/or getResourceAsStream, and javax.imageio.ImageIO.read, to read the images. You specify the image paths as relative to the applet (e.g., don't start them with "C:\").

Similar Messages

Applet Error:java.security.AccessControlException: access denied

Hi,
I just successful deploy an business component project to oralce 8.1.6 as an EJB Session bean, and
the test of application module is successful. In the same workspace, I create an new project with
an applet(which contains only an grid control)as a client of the business component. Everything works
fine within the Applet viewer, however, when I trying to load the applet in IE5.5 I got the following
error message in java console:
Java(TM) Plug-in
Using JRE version 1.2.1
User home directory = D:\Documents and Settings\ERic
Proxy Configuration: no proxy
JAR cache enabled.
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.debugoutput read)'
Diagnostics: Silencing all diagnostic output (use -Djbo.debugoutput=console to see it)
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.logging.show.timing read)'
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.logging.show.function read)'
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.logging.show.level read)'
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.logging.show.linecount read)'
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.logging.trace.threshold read)'
Failed to query environment: 'access denied (java.util.PropertyPermission jbo.jdbc.driver.verbose read)'
java.lang.ExceptionInInitializerError: java.security.AccessControlException: access denied (java.util.PropertyPermission org.omg.CORBA.ORBClass read)
at java.security.AccessControlContext.checkPermission(Compiled Code)
at oracle.aurora.jndi.orb_dep.Orb.<clinit>(Orb.java:24)
at oracle.aurora.jndi.sess_iiop.sess_iiopURLContext.<clinit>(sess_iiopURLContext.java:9)
at javax.naming.spi.NamingManager.getURLObject(NamingManager.java:588)
at javax.naming.spi.NamingManager.getURLContext(NamingManager.java:537)
at javax.naming.InitialContext.getURLOrDefaultInitCtx(InitialContext.java:274)
at javax.naming.InitialContext.lookup(InitialContext.java:349)
at oracle.jbo.client.remote.ejb.aurora.AuroraEJBAmHomeImpl.connectToService(AuroraEJBAmHomeImpl.java:179)
at oracle.jbo.client.remote.ejb.aurora.AuroraEJBAmHomeImpl.createSession(AuroraEJBAmHomeImpl.java:152)
at oracle.jbo.client.remote.ejb.aurora.AuroraEJBAmHomeImpl.initRemoteHome(AuroraEJBAmHomeImpl.java:123)
at oracle.jbo.client.remote.ejb.aurora.AuroraEJBAmHomeImpl.<init>(AuroraEJBAmHomeImpl.java:59)
at oracle.jbo.client.remote.ejb.aurora.AuroraEJBInitialContext.createJboHome(AuroraEJBInitialContext.java:47)
at oracle.jbo.common.JboInitialContext.lookup(JboInitialContext.java:72)
at javax.naming.InitialContext.lookup(InitialContext.java:349)
at oracle.dacf.dataset.SessionInfo._createAppModule(SessionInfo.java:2330)
at oracle.dacf.dataset.SessionInfo.connect(SessionInfo.java:1799)
at oracle.dacf.dataset.SessionInfo.openProducerObject(SessionInfo.java:1848)
at oracle.dacf.dataset.ProducerObject.open(ProducerObject.java:94)
at oracle.dacf.dataset.SessionInfo.publishSession(SessionInfo.java:1305)
at oracle.dacf.dataset.SessionInfo.publishSession(SessionInfo.java:1287)
at broadcastapplet.myBroadCastApplet.init(myBroadCastApplet.java:70)
at sun.applet.AppletPanel.run(Compiled Code)
at java.lang.Thread.run(Thread.java:479)
The Oracle 8.1.6 runs on Win2000, I put the JAR & related zip files in the same machine's IIS webserver.
Is anyone can help?
ERic

Hi Shaji,
Are you calling a webservice from within an Xacute Query for your applet? On first glance, it looks like a web service call is being rejected due to security permissions. If you have a webservice call (or HTTP post/get), can you test it separately with the same credentials as the webpage is using?
Regards,
Mike

Cant get image to load in JApplet - java.security.AccessControlException

hi,
I need to make a JApplet that loads and displays images. Before I worry about media tracker or anything else I need to get the image to load.
My code is:
package Applet;
import java.awt.*;
import javax.swing.*;
import java.applet.*;
* @author Nick
public class TestJApplet extends JApplet {
    /** Creates a new instance of TestJApplet */
    public TestJApplet() {
    public void init()
    public void paint(Graphics g)
        Image image;
        image = getImage(this.getDocumentBase(),"a.gif");
        g.drawRect(30,30,30,30);
}where a.gif is located in the same folder as the .java file.
I get the following message:
Exception in thread "AWT-EventQueue-1" java.security.AccessControlException: access denied (java.io.FilePermission \C:\Documents and Settings\Nick\Math\build\a.gif read)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
        at sun.awt.image.URLImageSource.<init>(URLImageSource.java:37)
        at sun.applet.AppletImageRef.reconstitute(AppletImageRef.java:33)
        at sun.misc.Ref.get(Ref.java:47)
        at sun.applet.AppletViewer.getCachedImage(AppletViewer.java:377)
        at sun.applet.AppletViewer.getImage(AppletViewer.java:372)
        at java.applet.Applet.getImage(Applet.java:236)
        at java.applet.Applet.getImage(Applet.java:258)
        at Applet.TestJApplet.paint(TestJApplet.java:27)
        at sun.awt.RepaintArea.paintComponent(RepaintArea.java:248)
        at sun.awt.RepaintArea.paint(RepaintArea.java:224)
        at sun.awt.windows.WComponentPeer.handleEvent(WComponentPeer.java:254)
        at java.awt.Component.dispatchEventImpl(Component.java:4031)
        at java.awt.Container.dispatchEventImpl(Container.java:2024)
        at java.awt.Component.dispatchEvent(Component.java:3803)
        at java.awt.EventQueue.dispatchEvent(EventQueue.java:463)
        at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:242)
        at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:163)
        at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:157)
        at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:149)
        at java.awt.EventDispatchThread.run(EventDispatchThread.java:110)
Exception in thread "AWT-EventQueue-1" java.security.AccessControlException: access denied (java.io.FilePermission \C:\Documents and Settings\Nick\Math\build\a.gif read)
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
        at java.security.AccessController.checkPermission(AccessController.java:427)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
        at java.lang.SecurityManager.checkRead(SecurityManager.java:871)
        at sun.awt.image.URLImageSource.<init>(URLImageSource.java:37)
        at sun.applet.AppletImageRef.reconstitute(AppletImageRef.java:33)
        at sun.misc.Ref.get(Ref.java:47)
        at sun.applet.AppletViewer.getCachedImage(AppletViewer.java:377)
        at sun.applet.AppletViewer.getImage(AppletViewer.java:372)
        at java.applet.Applet.getImage(Applet.java:236)
        at java.applet.Applet.getImage(Applet.java:258)
        at Applet.TestJApplet.paint(TestJApplet.java:27)
        at sun.awt.RepaintArea.paintComponent(RepaintArea.java:248)
        at sun.awt.RepaintArea.paint(RepaintArea.java:224)
        at sun.awt.windows.WComponentPeer.handleEvent(WComponentPeer.java:254)
        at java.awt.Component.dispatchEventImpl(Component.java:4031)
        at java.awt.Container.dispatchEventImpl(Container.java:2024)
        at java.awt.Component.dispatchEvent(Component.java:3803)
        at java.awt.EventQueue.dispatchEvent(EventQueue.java:463)
        at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:242)
        at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:163)
        at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:157)
        at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:149)
        at java.awt.EventDispatchThread.run(EventDispatchThread.java:110)Could someone help me get an image to load in an Applet/JApplet.
Cheers :)

From looking at your code there are two problems... the first is that you have a security exception being thrown because you are attempting to load a file locally with insufficient privileges to do so. This is because Applets have additional security levied on them so they don't say, in this circumstance steal a file off the loaded machine and send it back to the server that delivered them.
If you want to get your applet to load a local file (I don't think that is what you're asking here) then you have to digitally sign your applet and allow the user to decide if they want to be allow it to load a local file.
Nutshell is that you need to understand that the URL returned from getDocumentBase() in an applet is going to be from the Jar file you send the applet with or the URL you served the applet from. This is a bit of debugging code to show you what you are looking at and hopefully explain anything ambiguous I may have stated.
package testapplication;
import java.awt.EventQueue;
import java.awt.event.MouseEvent;
import java.awt.event.MouseListener;
* Description : <p></p>
* @author John Michael Resler<br/>
* Class : DocBaseApplet<br/>
* Creation Time : 8:31 AM<br/>
* Creation Date : June 18, 2006<br/>
* Compiler : Sun Java Community Edition (version 1.5.0_06)<br/>
public class DocBaseApplet extends javax.swing.JApplet implements MouseListener {
     * Initializes the applet DocBaseApplet
    public void init() {
        try {
            EventQueue.invokeAndWait(new Runnable() {
                public void run() {
                    initComponents();
        } catch (Exception ex) {
            ex.printStackTrace();
    private void initComponents() {
        documentBaseLabel = new javax.swing.JLabel();
        documentBaseLabel.addMouseListener(new java.awt.event.MouseAdapter() {
            public void mouseClicked(java.awt.event.MouseEvent evt) {
                documentBaseLabelMouseClicked(evt);
        org.jdesktop.layout.GroupLayout layout = new org.jdesktop.layout.GroupLayout(getContentPane());
        getContentPane().setLayout(layout);
        layout.setHorizontalGroup(
            layout.createParallelGroup(org.jdesktop.layout.GroupLayout.LEADING)
            .add(layout.createSequentialGroup()
                .addContainerGap()
                .add(documentBaseLabel, org.jdesktop.layout.GroupLayout.DEFAULT_SIZE, 376, Short.MAX_VALUE)
                .addContainerGap())
        layout.setVerticalGroup(
            layout.createParallelGroup(org.jdesktop.layout.GroupLayout.LEADING)
            .add(layout.createSequentialGroup()
                .addContainerGap()
                .add(documentBaseLabel, org.jdesktop.layout.GroupLayout.DEFAULT_SIZE, 274, Short.MAX_VALUE)
                .addContainerGap())
    private void documentBaseLabelMouseClicked(java.awt.event.MouseEvent evt) {
        // TODO add your handling code here:
        this.documentBaseLabel.setText(this.getDocumentBase().toString());
    public void mouseClicked(MouseEvent e) {
    public void mousePressed(MouseEvent e) {
    public void mouseReleased(MouseEvent e) {
    public void mouseEntered(MouseEvent e) {
    public void mouseExited(MouseEvent e) {
    private javax.swing.JLabel documentBaseLabel;
}

Java.security.AccessControlException when calling web service from applet

I have an applet that calls a webservce (Xmethods' delayed stock quote service). When I run the applet in appletviewer, I get the following:
[SOAPException: faultCode=SOAP-ENV:Client; msg=Error opening socket: java.security.AccessControlException: access denied (java.net.SocketPermission 66.28.98.121:9090 connect,resolve); targetException=java.lang.IllegalArgumentException:
Error opening socket: java.security.AccessControlException:
access denied
etc.....
My code works fine as an application, but not as an applet. (This was after I eventually had to extract the necessary SOAP .jar files into the same directory as my applet, but that's another topic...or maybe not?)
Help!
Regards,
John Kirksey

The default security settings does not give an applet to connect to any other server apart from the one from which it was downloaded. This is your problem. To mitigate that you have to change the security setting of the applet conatiner i.e the JVM in the browser.
Ironluca

Signed applet not working in firefox - java.security.AccessControlException

Hello,
I have a signed applet that works fine in IE 7 but in Firefox I'm getting this exception in the java console:
java.security.AccessControlException: access denied (java.net.SocketPermission myhost.com resolve)
I already tried to run the applet with different JRE versions in Firefox with the same result: 1.6.0_01, 1.6.0_02, 1.6.0_03, 1.6.0_05
I'll appreciate your help.

thanx 4 replying
using the browser to view Applet is not recomended that is because if u change the the source-code and recompile the applet then run it using the broswer it will run the old-version
Also i've found the solution here
http://www.cs.utah.edu/classes/cs1021/notes/lecture03/eclipse_help.html

Applet and data base error. java.security.AccessControlException:

Hi All
I am new to java.
I am trying to access data base SQL 7.0 thru an applet but its giving an error "java.security.AccessControlException:"
Can any one help me plz!!!!
Thx in advance
Vipin

Is a Applet Application so, u have to sign the application using jarsigner tool
visit :
http://java.sun.com/j2se/1.3/docs/tooldocs/win32/jarsigner.html
http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html
If NOT/before
Create a file name called ".java.policy" and placed/saved it in user home directory.
All the best
Edward.I

Java.security.AccessControlException: access denied; for a signed applet

Hi,
I have a signed applet which is used to read local files. When I call the applet method which is reading the file, from javascript I am getting "java.security.AccessControlException: access denied ". Where as if the method gets called during applet load, file is read without errors? How can I get over this problem?
If there is a way loading the applet based on a condition from Javascript, please let me know.
Thanks,

[http://forums.sun.com/thread.jspa?forumID=421&threadID=5308353]

Java.security.AccessControlException: access denied when loading from a jar

Hello!
I am trying to deploy an applet into a browser but I have encountered a security problem.
The name of the applet is SWTInBrowser(not exactly mine, it's an example from the web).
package my.applet;
import org.eclipse.swt.awt.SWT_AWT;
import java.applet.Applet;
import java.awt.event.ActionListener;
import java.awt.event.ActionEvent;
import java.awt.Canvas;
import org.eclipse.swt.widgets.Shell;
import org.eclipse.swt.widgets.Display;
import org.eclipse.swt.SWT;
import org.eclipse.swt.widgets.Listener;
import org.eclipse.swt.widgets.Event;
import org.eclipse.swt.graphics.Point;
import org.eclipse.swt.layout.FillLayout;
public class SWTInBrowser extends Applet implements Runnable{
     public void init () {
           /* Create Example AWT and Swing widgets */
           java.awt.Button awtButton = new java.awt.Button("AWT Button");
           add(awtButton);
           awtButton.addActionListener(new ActionListener () {
            public void actionPerformed (ActionEvent event) {
             showStatus ("AWT Button Selected");
           javax.swing.JButton jButton = new javax.swing.JButton("Swing Button");
           add(jButton);
           jButton.addActionListener(new ActionListener () {
            public void actionPerformed (ActionEvent event) {
             showStatus ("Swing Button Selected");
           Thread swtUIThread = new Thread (this);
           swtUIThread.start ();
          public void run() {
           /* Create an SWT Composite from an AWT canvas to be the parent of the SWT
          widgets.
            * The AWT Canvas will be layed out by the Applet layout manager. The
          layout of the
            * SWT widgets is handled by the application (see below).
           Canvas awtParent = new Canvas();
           add(awtParent);
           Display display = new Display();
           Shell swtParent = SWT_AWT.new_Shell(display, awtParent);
//           Display display = swtParent.getDisplay();
           swtParent.setLayout(new FillLayout());
           /* Create SWT widget */
           org.eclipse.swt.widgets.Button swtButton = new
          org.eclipse.swt.widgets.Button(swtParent, SWT.PUSH);
           swtButton.setText("SWT Button");
           swtButton.addListener(SWT.Selection, new Listener() {
            public void handleEvent(Event event){
             showStatus("SWT Button selected.");
           swtButton.addListener(SWT.Dispose, new Listener() {
            public void handleEvent(Event event){
             System.out.println("Button was disposed.");
           // Size AWT Panel so that it is big enough to hold the SWT widgets
           Point size = swtParent.computeSize (SWT.DEFAULT, SWT.DEFAULT);
           awtParent.setSize(size.x + 2, size.y + 2);
           // Need to invoke the AWT layout manager or AWT and Swing
           // widgets will not be visible
           validate();
           // The SWT widget(s) require an event loop
           while (!swtParent.isDisposed()) {
            if (!display.readAndDispatch()) display.sleep ();
}It works perfectly in the Applet Viewer, but not in the browser. In the browser, I only get two buttons working, the SWT button doesn't appear, because of this error:
Exception in thread "Thread-21" java.lang.ExceptionInInitializerError
     at org.eclipse.swt.widgets.Display.<clinit>(Display.java:130)
     at my.applet.SWTInBrowser.run(SWTInBrowser.java:52)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission sun.arch.data.model read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
     at java.lang.System.getProperty(Unknown Source)
     at org.eclipse.swt.internal.Library.loadLibrary(Library.java:167)
     at org.eclipse.swt.internal.Library.loadLibrary(Library.java:151)
     at org.eclipse.swt.internal.C.<clinit>(C.java:21)
     ... 3 moreI have exported the application in a jar, and in that jar I have put the swt.jar that the application need for the displaying of the third button, swt button.
Here is also the HTML file:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=Cp1252"/>
    <title>
      Test
    </title>
</head>
<body>
    <p>
          <applet code="my.applet.SWTInBrowser"
                    archive="Test.jar"
                    width="1400" height="800">
          </applet>
    </p>
</body>
</html>Could anyone please help me solve this problem?

This is in reply to the first post. I don't know what happened after.
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission sun.arch.data.model read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
     at java.lang.System.getProperty(Unknown Source)
     at org.eclipse.swt.internal.Library.loadLibrary(Library.java:167)
     at org.eclipse.swt.internal.Library.loadLibrary(Library.java:151)
     at org.eclipse.swt.internal.C.<clinit>(C.java:21)
If you read the above trace from bottom to top, it shows none of you classes, only classes from that Eclipse library, which seems to loadLibrary() a native DLL. In order to do this, it needs to call System.getProperty( "sun.arch.data.model" ). This call is not allowed from un unsigned applet. So I guess you need to sign the applet and this problem will go away. Many other problems may follow. Just read very very carefully all the related documentation, which I did not.

Getting java.security.AccessControlException: access denied

My application is applet based. In this when i trying to read one image file from my drive folder it is giving
java.security.AccessControlException: access denied
i tried AccessController.doPrivileged(new PrivilegedAction() {
public Object run() {
// perform the security-sensitive operation here
but this is also not helping..
What i m suppossing is that applet will not allow to acess Client machine
then how i 'll get that image file from from my machine folder....
I want to use this image file set as windows icon..
or is there any other method to set the icon of the window
Edited by: Sandy10 on Mar 17, 2010 10:27 AM
Edited by: Sandy10 on Mar 17, 2010 12:06 PM

How does this differ from your [other question|http://forums.sun.com/thread.jspa?threadID=5432244]?

See my error java.security.AccessControlException: access denied how change

hi master
sir wrote connection class that run and give me right result
but when i call data from applet then
java give me error
java.security.AccessControlException: access denied (java.util.PropertyPermission oracle.jserver.version read)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:269)
at java.security.AccessController.checkPermission(AccessController.java:401)
=======
sir i serch in net i got some idea
i. change java.policy
and put this code
grant codeBase "http://ib-s01/-" {
permission java.security.AllPermission;
sir please give me idea i serch java.policy in my system that show many java.policy file
sir which file i use and where i put
this code
grant codeBase "http://ib-s01/-" {
permission java.security.AllPermission;
second idea got from net change the java.security
2. change java.security
and put this code
policy.url.1=file:${java.home}/lib/security/java.policy
sir please give me idea i serch java.policy in my system that show many java.security file
sir which file i use and where i put
this code
policy.url.1=file:${java.home}/lib/security/java.policy
please give me idea how i chang my java.policy and java.security file
thank you
aamir

Amir,
You have to make your applet a signed applet.
Please search the Internet to find out how to do this.
Good Luck,
Avi.

HELP!!! java.security.AccessControlException: access denied

Please help!
I have the project to use the applet to show the form, this applet is needed to read the file from the server side. when i using the jbuilder to coding, it can work to use the appletviewer to run the program to read the file.
After that i placed the code to the webapp (localhost), when i start up tomcat and use the ie to view the http://localhost:8080/auditForm/AuditForm.html. (this AuditForm.html is embedded the test.class. test.class use to read the file.
but error was occurred.
i am using the File Object to read file
File propertyFile=new File("C:/Tomcat/webapps/XX/WEB-INF/dbconfig.properties");java.security.AccessControlException: access denied (java.io.FilePermission C:\Tomcat\webapps\auditform\test\dbconfig.properties read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkRead(Unknown Source)
     at java.io.File.canRead(Unknown Source)
     at DBconfig.<init>(DBconfig.java:31)
     at test.init(test.java:19)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
i am try to set the security policy in jdk, and tomcat, but also cannot work??? is it wrong setting??? how come.
urgent!!!!

Hey guys,
You can access what ever file you want on the originating host i.e. the server.
Im guessing you guys are testing your applet code probably before it takes the form of an applet. It's fundamental to realise that applets are downloaded to the client and excuted in a 'sandbox' by the java-plugin installed in the client browser. Hence using a File instance pointing somewhere on the C:\ drive is totally pointless as you likely won't have permission to access the client's hard drive anyway. More to the point, it is totally wrong; the property files or movies do not reside on the client machine.... and there is no need to confuse matters by talking about signing Jars.
My advice is to read the Applet/JApplet APIs which cleary show how to access 'resources' on the server - no extra permissions are needed so it is not even a security issue. Also, you web application usually can not see outside its context/document base so you will need to put the property file or movies in the same directory (or a visible sub-directory) as the applet code/jar itself.
Hope this info is of some use.
Warm regards.

How can i deal with java.security.AccessControlException?

Hi all, I need to implement JavaMail using Servlet and deploy throught J2EE deployment tool. But when i test out the servlet i will always encounter this exception thrown. How can i solve this?
java.security.AccessControlException: access denied (java.util.PropertyPermission * read,write)
This is the servlet i am testing. Please advise. Thanks in advance!
* @(#)JavaMailServlet.java     1.3 99/12/06
* Copyright 1998, 1999 Sun Microsystems, Inc. All Rights Reserved.
* This software is the proprietary information of Sun Microsystems, Inc.
* Use is subject to license terms.
import java.io.*;
import java.util.*;
import java.text.*;
import javax.servlet.*;
import javax.servlet.http.*;
import javax.mail.*;
import javax.mail.internet.*;
import javax.activation.*;
* This is a servlet that demonstrates the use of JavaMail APIs
* in a 3-tier application. It allows the user to login to an
* IMAP store, list all the messages in the INBOX folder, view
* selected messages, compose and send a message, and logout.
* <p>
* Please note: This is NOT an example of how to write servlets!
* This is simply to show that JavaMail can be used in a servlet.
* <p>
* For more information on this servlet, see the
* JavaMailServlet.README.txt file.
* <p>
* For more information on servlets, see
* * http://java.sun.com/products/java-server/servlets/index.html
* @author Max Spivak
public class JavaMailServlet extends HttpServlet implements SingleThreadModel {
String protocol = "POP3";
String mbox = "INBOX";
* This method handles the "POST" submission from two forms: the
* login form and the message compose form. The login form has the
* following parameters: <code>hostname</code>, <code>username</code>,
* and <code>password</code>. The <code>send</code> parameter denotes
* that the method is processing the compose form submission.
public void doPost(HttpServletRequest req, HttpServletResponse res)
     throws ServletException, IOException {
// get the session
     HttpSession ssn = req.getSession(true);
     String send = req.getParameter("send");
String host = req.getParameter("hostname");
String user = req.getParameter("username");
String passwd = req.getParameter("password");
URLName url = new URLName(protocol, host, -1, mbox, user, passwd);
ServletOutputStream out = res.getOutputStream();
     res.setContentType("text/html");
     out.println("<html><body bgcolor=\"#CCCCFF\">");
     if (send != null) {
     // process message sending
     send(req, res, out, ssn);
     } else {
     // initial login
     // create
     MailUserData mud = new MailUserData(url);
     ssn.putValue("javamailservlet", mud);
     try {
          Properties props = System.getProperties();
          System.out.println("url");
          props.put("mail.smtp.host", host);
          Session session = Session.getDefaultInstance(props, null);
          session.setDebug(false);
          Store store = session.getStore(url);
          store.connect();
          Folder folder = store.getDefaultFolder();
          if (folder == null)
          throw new MessagingException("No default folder");
          folder = folder.getFolder(mbox);
          if (folder == null)
          throw new MessagingException("Invalid folder");
          folder.open(Folder.READ_WRITE);
          int totalMessages = folder.getMessageCount();
          Message[] msgs = folder.getMessages();
          FetchProfile fp = new FetchProfile();
          fp.add(FetchProfile.Item.ENVELOPE);
          folder.fetch(msgs, fp);
          // track who logged in
          System.out.println("Login from: " + store.getURLName());
          // save stuff into MUD
          mud.setSession(session);
          mud.setStore(store);
          mud.setFolder(folder);
          // splash
          out.print("<center>");
          out.print("<font face=\"Arial,Helvetica\" font size=+3>");
          out.println("<b>Welcome to JavaMail!</b></font></center><p>");
          // folder table
          out.println("<table width=\"50%\" border=0 align=center>");
          // folder name column header
          out.print("<tr><td width=\"75%\" bgcolor=\"#ffffcc\">");
          out.print("<font face=\"Arial,Helvetica\" font size=-1>");
          out.println("<b>FolderName</b></font></td><br>");
          // msg count column header
          out.print("<td width=\"25%\" bgcolor=\"#ffffcc\">");
          out.print("<font face=\"Arial,Helvetica\" font size=-1>");
          out.println("<b>Messages</b></font></td><br>");
          out.println("</tr>");
          // folder name
          out.print("<tr><td width=\"75%\" bgcolor=\"#ffffff\">");
          out.print("<a href=\"" + HttpUtils.getRequestURL(req) + "\">" +
               "Inbox" + "</a></td><br>");
          // msg count
          out.println("<td width=\"25%\" bgcolor=\"#ffffff\">" +
               totalMessages + "</td>");
          out.println("</tr>");
          out.println("</table");
     } catch (Exception ex) {
          out.println(ex.toString());
     } finally {
          out.println("</body></html>");
          out.close();
* This method handles the GET requests for the client.
public void doGet (HttpServletRequest req, HttpServletResponse res)
     throws ServletException, IOException {
HttpSession ses = req.getSession(false); // before we write to out
ServletOutputStream out = res.getOutputStream();
     MailUserData mud = getMUD(ses);
     if (mud == null) {
     res.setContentType("text/html");
     out.println("<html><body>Please Login (no session)</body></html>");
     out.close();
     return;
     if (!mud.getStore().isConnected()) {
     res.setContentType("text/html");
     out.println("<html><body>Not Connected To Store</body></html>");
     out.close();
     return;
     // mux that takes a GET request, based on parameters figures
     // out what it should do, and routes it to the
     // appropriate method
     // get url parameters
     String msgStr = req.getParameter("message");
String logout = req.getParameter("logout");
     String compose = req.getParameter("compose");
     String part = req.getParameter("part");
     int msgNum = -1;
     int partNum = -1;
     // process url params
     if (msgStr != null) {
     // operate on message "msgStr"
     msgNum = Integer.parseInt(msgStr);
     if (part == null) {
          // display message "msgStr"
res.setContentType("text/html");
          displayMessage(mud, req, out, msgNum);
     } else if (part != null) {
          // display part "part" in message "msgStr"
          partNum = Integer.parseInt(part);
displayPart(mud, msgNum, partNum, out, res);
     } else if (compose != null) {
     // display compose form
     compose(mud, res, out);
} else if (logout != null) {
     // process logout
try {
mud.getFolder().close(false);
mud.getStore().close();
          ses.invalidate();
out.println("<html><body>Logged out OK</body></html>");
} catch (MessagingException mex) {
out.println(mex.toString());
     } else {
     // display headers
     displayHeaders(mud, req, out);
/* main method to display messages */
private void displayMessage(MailUserData mud, HttpServletRequest req,
                    ServletOutputStream out, int msgNum)
     throws IOException {
     out.println("<html>");
out.println("<HEAD><TITLE>JavaMail Servlet</TITLE></HEAD>");
     out.println("<BODY bgcolor=\"#ccccff\">");
     out.print("<center><font face=\"Arial,Helvetica\" ");
     out.println("font size=\"+3\"><b>");
     out.println("Message " + (msgNum+1) + " in folder " +
          mud.getStore().getURLName() +
          "/INBOX</b></font></center><p>");
     try {
     Message msg = mud.getFolder().getMessage(msgNum);
     // first, display this message's headers
     displayMessageHeaders(mud, msg, out);
     // and now, handle the content
     Object o = msg.getContent();
     //if (o instanceof String) {
     if (msg.isMimeType("text/plain")) {
          out.println("<pre>");
          out.println((String)o);
          out.println("</pre>");
     //} else if (o instanceof Multipart){
     } else if (msg.isMimeType("multipart/*")) {
          Multipart mp = (Multipart)o;
          int cnt = mp.getCount();
          for (int i = 0; i < cnt; i++) {
          displayPart(mud, msgNum, mp.getBodyPart(i), i, req, out);
     } else {
          out.println(msg.getContentType());
     } catch (MessagingException mex) {
     out.println(mex.toString());
     out.println("</BODY></html>");
     out.close();
* This method displays a message part. <code>text/plain</code>
* content parts are displayed inline. For all other parts,
* a URL is generated and displayed; clicking on the URL
* brings up the part in a separate page.
private void displayPart(MailUserData mud, int msgNum, Part part,
               int partNum, HttpServletRequest req,
               ServletOutputStream out)
     throws IOException {
     if (partNum != 0)
     out.println("<p><hr>");
try {
     String sct = part.getContentType();
     if (sct == null) {
          out.println("invalid part");
          return;
     ContentType ct = new ContentType(sct);
     if (partNum != 0)
          out.println("<b>Attachment Type:</b> " +
               ct.getBaseType() + "<br>");
     if (ct.match("text/plain")) {
          // display text/plain inline
          out.println("<pre>");
          out.println((String)part.getContent());
          out.println("</pre>");
     } else {
          // generate a url for this part
          String s;
          if ((s = part.getFileName()) != null)
          out.println("<b>Filename:</b> " + s + "<br>");
          s = null;
          if ((s = part.getDescription()) != null)
          out.println("<b>Description:</b> " + s + "<br>");
          out.println("<a href=\"" +
               HttpUtils.getRequestURL(req) +
               "?message=" +
               msgNum + "&part=" +
               partNum + "\">Display Attachment</a>");
     } catch (MessagingException mex) {
     out.println(mex.toString());
* This method gets the stream from for a given msg part and
* pushes it out to the browser with the correct content type.
* Used to display attachments and relies on the browser's
* content handling capabilities.
private void displayPart(MailUserData mud, int msgNum,
               int partNum, ServletOutputStream out,
               HttpServletResponse res)
     throws IOException {
     Part part = null;
try {
     Message msg = mud.getFolder().getMessage(msgNum);
     Multipart mp = (Multipart)msg.getContent();
     part = mp.getBodyPart(partNum);
     String sct = part.getContentType();
     if (sct == null) {
          out.println("invalid part");
          return;
     ContentType ct = new ContentType(sct);
     res.setContentType(ct.getBaseType());
     InputStream is = part.getInputStream();
     int i;
     while ((i = is.read()) != -1)
          out.write(i);
     out.flush();
     out.close();
     } catch (MessagingException mex) {
     out.println(mex.toString());
* This is a utility message that pretty-prints the message
* headers for message that is being displayed.
private void displayMessageHeaders(MailUserData mud, Message msg,
                    ServletOutputStream out)
     throws IOException {
     try {
     out.println("<b>Date:</b> " + msg.getSentDate() + "<br>");
Address[] fr = msg.getFrom();
if (fr != null) {
boolean tf = true;
out.print("<b>From:</b> ");
for (int i = 0; i < fr.length; i++) {
out.print(((tf) ? " " : ", ") + getDisplayAddress(fr));
tf = false;
out.println("<br>");
Address[] to = msg.getRecipients(Message.RecipientType.TO);
if (to != null) {
boolean tf = true;
out.print("<b>To:</b> ");
for (int i = 0; i < to.length; i++) {
out.print(((tf) ? " " : ", ") + getDisplayAddress(to[i]));
tf = false;
out.println("<br>");
Address[] cc = msg.getRecipients(Message.RecipientType.CC);
if (cc != null) {
boolean cf = true;
out.print("<b>CC:</b> ");
for (int i = 0; i < cc.length; i++) {
out.print(((cf) ? " " : ", ") + getDisplayAddress(cc[i]));
          cf = false;
out.println("<br>");
     out.print("<b>Subject:</b> " +
          ((msg.getSubject() !=null) ? msg.getSubject() : "") +
          "<br>");
} catch (MessagingException mex) {
     out.println(msg.toString());
* This method displays the URL's for the available commands and the
* INBOX headerlist
private void displayHeaders(MailUserData mud,
                    HttpServletRequest req,
ServletOutputStream out)
     throws IOException {
SimpleDateFormat df = new SimpleDateFormat("EE M/d/yy");
out.println("<html>");
out.println("<HEAD><TITLE>JavaMail Servlet</TITLE></HEAD>");
     out.println("<BODY bgcolor=\"#ccccff\"><hr>");
     out.print("<center><font face=\"Arial,Helvetica\" font size=\"+3\">");
     out.println("<b>Folder " + mud.getStore().getURLName() +
          "/INBOX</b></font></center><p>");
     // URL's for the commands that are available
     out.println("<font face=\"Arial,Helvetica\" font size=\"+3\"><b>");
out.println("<a href=\"" +
          HttpUtils.getRequestURL(req) +
          "?logout=true\">Logout</a>");
out.println("<a href=\"" +
          HttpUtils.getRequestURL(req) +
          "?compose=true\" target=\"compose\">Compose</a>");
     out.println("</b></font>");
     out.println("<hr>");
     // List headers in a table
out.print("<table cellpadding=1 cellspacing=1 "); // table
     out.println("width=\"100%\" border=1>"); // settings
     // sender column header
     out.println("<tr><td width=\"25%\" bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Sender</b></font></td>");
     // date column header
     out.println("<td width=\"15%\" bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Date</b></font></td>");
     // subject column header
     out.println("<td bgcolor=\"ffffcc\">");
     out.println("<font face=\"Arial,Helvetica\" font size=\"+1\">");
     out.println("<b>Subject</b></font></td></tr>");
     try {
     Folder f = mud.getFolder();
     int msgCount = f.getMessageCount();
     Message m = null;
     // for each message, show its headers
     for (int i = 1; i <= msgCount; i++) {
m = f.getMessage(i);
          // if message has the DELETED flag set, don't display it
          if (m.isSet(Flags.Flag.DELETED))
          continue;
          // from
out.println("<tr valigh=middle>");
out.print("<td width=\"25%\" bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
               ((m.getFrom() != null) ?
               m.getFrom()[0].toString() :
               "" ) +
               "</font></td>");
          // date
out.print("<td nowrap width=\"15%\" bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
df.format((m.getSentDate()!=null) ?
                    m.getSentDate() : m.getReceivedDate()) +
               "</font></td>");
          // subject & link
out.print("<td bgcolor=\"ffffff\">");
          out.println("<font face=\"Arial,Helvetica\">" +
          "<a href=\"" +
               HttpUtils.getRequestURL(req) +
"?message=" +
i + "\">" +
((m.getSubject() != null) ?
               m.getSubject() :
               "<i>No Subject</i>") +
"</a>" +
"</font></td>");
out.println("</tr>");
     } catch (MessagingException mex) {
     out.println("<tr><td>" + mex.toString() + "</td></tr>");
     mex.printStackTrace();
     out.println("</table>");
     out.println("</BODY></html>");
     out.flush();
     out.close();
* This method handles the request when the user hits the
* <i>Compose</i> link. It send the compose form to the browser.
private void compose(MailUserData mud, HttpServletResponse res,
               ServletOutputStream out)
     throws IOException {
     res.setContentType("text/html");
     out.println(composeForm);
     out.close();
* This method processes the send request from the compose form
private void send(HttpServletRequest req, HttpServletResponse res,
          ServletOutputStream out, HttpSession ssn)
     throws IOException {
String to = req.getParameter("to");
     String cc = req.getParameter("cc");
     String subj = req.getParameter("subject");
     String text = req.getParameter("text");
     try {
     MailUserData mud = getMUD(ssn);
     if (mud == null)
          throw new Exception("trying to send, but not logged in");
     Message msg = new MimeMessage(mud.getSession());
     InternetAddress[] toAddrs = null, ccAddrs = null;
     if (to != null) {
          toAddrs = InternetAddress.parse(to, false);
          msg.setRecipients(Message.RecipientType.TO, toAddrs);
     } else
          throw new MessagingException("No \"To\" address specified");
     if (cc != null) {
          ccAddrs = InternetAddress.parse(cc, false);
          msg.setRecipients(Message.RecipientType.CC, ccAddrs);
     if (subj != null)
          msg.setSubject(subj);
     URLName u = mud.getURLName();
     msg.setFrom(new InternetAddress(u.getUsername() + "@" +
                         u.getHost()));
     if (text != null)
          msg.setText(text);
     Transport.send(msg);
     out.println("<h1>Message sent successfully</h1></body></html>");
     out.close();
     } catch (Exception mex) {
     out.println("<h1>Error sending message.</h1>");
     out.println(mex.toString());
     out.println("<br></body></html>");
// utility method; returns a string suitable for msg header display
private String getDisplayAddress(Address a) {
String pers = null;
String addr = null;
if (a instanceof InternetAddress &&
((pers = ((InternetAddress)a).getPersonal()) != null)) {
     addr = pers + " "+"<"+((InternetAddress)a).getAddress()+">";
} else
addr = a.toString();
return addr;
// utility method; retrieve the MailUserData
// from the HttpSession and return it
private MailUserData getMUD(HttpSession ses) throws IOException {
     MailUserData mud = null;
     if (ses == null) {
     return null;
     } else {
     if ((mud = (MailUserData)ses.getValue("javamailservlet")) == null){
          return null;
     return mud;
public String getServletInfo() {
return "A mail reader servlet";
* This is the HTML code for the compose form. Another option would
* have been to use a separate html page.
private static String composeForm = "<HTML><HEAD><TITLE>JavaMail Compose</TITLE></HEAD><BODY BGCOLOR=\"#CCCCFF\"><FORM ACTION=\"/servlet/JavaMailServlet\" METHOD=\"POST\"><input type=\"hidden\" name=\"send\" value=\"send\"><P ALIGN=\"CENTER\"><B><FONT SIZE=\"4\" FACE=\"Verdana, Arial, Helvetica\">JavaMail Compose Message</FONT></B><P><TABLE BORDER=\"0\" WIDTH=\"100%\"><TR><TD WIDTH=\"16%\" HEIGHT=\"22\">     <P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">To:</FONT></B></TD><TD WIDTH=\"84%\" HEIGHT=\"22\"><INPUT TYPE=\"TEXT\" NAME=\"to\" SIZE=\"30\"> <FONT SIZE=\"1\" FACE=\"Verdana, Arial, Helvetica\"> (separate addresses with commas)</FONT></TD></TR><TR><TD WIDTH=\"16%\"><P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">CC:</FONT></B></TD><TD WIDTH=\"84%\"><INPUT TYPE=\"TEXT\" NAME=\"cc\" SIZE=\"30\"> <FONT SIZE=\"1\" FACE=\"Verdana, Arial, Helvetica\"> (separate addresses with commas)</FONT></TD></TR><TR><TD WIDTH=\"16%\"><P ALIGN=\"RIGHT\"><B><FONT FACE=\"Verdana, Arial, Helvetica\">Subject:</FONT></B></TD><TD WIDTH=\"84%\"><INPUT TYPE=\"TEXT\" NAME=\"subject\" SIZE=\"55\"></TD></TR><TR><TD WIDTH=\"16%\"> </TD><TD WIDTH=\"84%\"><TEXTAREA NAME=\"text\" ROWS=\"15\" COLS=\"53\"></TEXTAREA></TD></TR><TR><TD WIDTH=\"16%\" HEIGHT=\"32\"> </TD><TD WIDTH=\"84%\" HEIGHT=\"32\"><INPUT TYPE=\"SUBMIT\" NAME=\"Send\" VALUE=\"Send\"><INPUT TYPE=\"RESET\" NAME=\"Reset\" VALUE=\"Reset\"></TD></TR></TABLE></FORM></BODY></HTML>";
* This class is used to store session data for each user's session. It
* is stored in the HttpSession.
class MailUserData {
URLName url;
Session session;
Store store;
Folder folder;
public MailUserData(URLName urlname) {
     url = urlname;
public URLName getURLName() {
     return url;
public Session getSession() {
     return session;
public void setSession(Session s) {
     session = s;
public Store getStore() {
     return store;
public void setStore(Store s) {
     store = s;
public Folder getFolder() {
     return folder;
public void setFolder(Folder f) {
     folder = f;

You posted a thousand lines of badly-formatted code and didn't have the sense to say which one had the exception.
My guess is that it was this one:Session session = Session.getDefaultInstance(props, null);because that happened to me. I fixed it by calling getInstance instead of getDefaultInstance.
However if that isn't the problem, how about spending a few seconds to post a less useless question?

Java.lang.Exception:java.security.accesscontrolException:access denied

good afternoon to all experts
i am getting the following exception when i am going to read file
java.lang.Exception:java.security.accesscontrolException:accessdenied(java.io.FilePermission c:\premiji.rar)
my applet as follows
import java.io.*;
import java.applet.*;
import java.awt.*;
import java.security.*;
import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.*;
import java.io.IOException;
public class TestApp extends Applet
     public static TextField t;
     public static String key;
    public Label l;
public void init()
   setBackground(Color.GRAY);
   setLayout(null);
   t=new TextField(" ");
   t.setEchoChar('*');
   l=new Label("Enter ur key");
   l.setBounds(0,2,75,20);
   t.setForeground(Color.RED);
   t.setBounds(78,2,150,20);
add(l);
   add(t);
public static String eFile(String plainFile)throws Exception
{String cFile="c://suri.rar";
     key=t.getText();
    byte[]raw=key.getBytes("UTF8");
    SecretKeySpec skeySpec = new SecretKeySpec(raw, "Blowfish");
    Cipher cipher = Cipher.getInstance("Blowfish");
    Cipher cipher2=Cipher.getInstance("Blowfish");
    cipher2.init(Cipher.DECRYPT_MODE,skeySpec);
    cipher.init(Cipher.ENCRYPT_MODE, skeySpec);
    InputStream fis,dis;
    FileOutputStream fos,dos;
    fis = new FileInputStream("c://premji.rar");
    fis = new javax.crypto.CipherInputStream(fis, cipher);
    fos = new FileOutputStream(cFile);
    byte[] b = new byte[8];
    int i = fis.read(b);
    while (i != -1) {
        fos.write(b, 0, i);
        i = fis.read(b);
dis = new FileInputStream(cFile);
dis = new javax.crypto.CipherInputStream(dis, cipher2);
dos=new FileOutputStream("c://madhu.rar");
byte[] c=new byte[8];
int j=dis.read(c);
while(j!=-1)
     dos.write(c,0,j);
     j=dis.read(c);
   fis.close() ;
   fos.close();
   return cFile;
}my html as follows
html>
<script language="JavaScript">
function pass()
    document.myForm.uname.value=document.myApp.eFile(document.myForm.upfile.value);
</script>
<applet name="myApp" code="TestApp.class" archive="TestApp.jar" width=600 height=80></applet>
<body>
<form name="myForm" >
Name
<input type="text" name="uname"/>
File
<input type="file" name="upfile"/>
<input type=button value="click" onClick="pass();">
<input type="submit"/>
</form>
</body>
</html>note:
i signed my applet like
keytool -genkey -alias sgsits -validity 365
jarsigner TestApp.jar sgsitshave we to modify polacy file also?
if so how & which one modify
any suggestion would be greatly appreciated
thanks in advance

I assume your signature is correct.
Signing the applet enables privileges (like file IO) whenever all the calls on the stack leading
to the sensitive operation (in your case fis = new FileInputStream("c://premji.rar")) originate
from the signed jar. It is not your case, as you come into the applet from javascript.
The solution is to use AccessController.doPrivileged...(). It was designed with this situation in mind.

Java.security.AccessControlException: access denied (java.util.PropertyPerm

Hi All,
I try to run an applet from Solaris 8 server on some client machine using IE5 and NetScape 6.2 ( I installed JRE 1.4, I also try other JRE versions) but I get the following errors again and agian,
I even try to use appletviewer on the Solaris Box itself to open the applet but it makes no difference same errors
could somebody please help or give me a hint how should I start tracing what the problem might be ?
this applet comes with Solaris Bandwidth Manager as a gui administration tool ( webbased ) it supposed to change the configurations remotly over the web. I asure there is no solaris permission problem exist.
I use Tomcat on the server side.Installed JDK 1.3 on Solaris 8 with all the default settings.
i suppose something should be done with java.policy or java.security files i know nothing about java security please at least give me some URL's to find out more about this matter i searched a lot but couldn't find good documents about java default security restrictions
java.lang.ExceptionInInitializerError
at com.sun.ba.common.QConfiguration.loadPredefServices(QConfiguration.java:617)
at com.sun.ba.common.QConfiguration.getPredefServices(QConfiguration.java:630)
at com.sun.ba.tool.MainPanel.<init>(MainPanel.java:95)
at com.sun.ba.tool.QoSFrame.<init>(QoSFrame.java:48)
at com.sun.ba.tool.baApplet.init(baApplet.java:46)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission console read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at com.sun.ba.common.QDebug.<clinit>(QDebug.java:39)
... 7 more
any help would be appriciated so much.
thanks
mehmad

I dont know, but It may be that an Applet can only access the local machine. ie. If you run the applet on computer A and you want to edit the config on computer B, I do not believe you can. The applet can only talk to Computer A. You would have to:
1) Run an application on computer A and the applet would tell the application what to change.
2)Maybe sign the applet in a JAR File
You will probably have to do #1.
US101

Java.security.AccessControlException: access denied (java.util.PropertyPer

Hi All,
I try to run an applet from Solaris 8 server on some client machine using IE5 and NetScape 6.2 ( I installed JRE 1.4, I also try other JRE versions) but I get the following errors again and agian,
I even try to use appletviewer on the Solaris Box itself to open the applet but it makes no difference same errors
could somebody please help or give me a hint how should I start tracing what the problem might be ?
this applet comes with Solaris Bandwidth Manager as a gui administration tool ( webbased ) it supposed to change the configurations remotly over the web. I asure there is no solaris permission problem exist.
I use Tomcat on the server side.Installed JDK 1.3 on Solaris 8 with all the default settings.
i suppose something should be done with java.policy or java.security files i know nothing about java security please at least give me some URL's to find out more about this matter i searched a lot but couldn't find good documents about java default security restrictions
java.lang.ExceptionInInitializerError
     at com.sun.ba.common.QConfiguration.loadPredefServices(QConfiguration.java:617)
     at com.sun.ba.common.QConfiguration.getPredefServices(QConfiguration.java:630)
     at com.sun.ba.tool.MainPanel.<init>(MainPanel.java:95)
     at com.sun.ba.tool.QoSFrame.<init>(QoSFrame.java:48)
     at com.sun.ba.tool.baApplet.init(baApplet.java:46)
     at sun.applet.AppletPanel.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission console read)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
     at java.lang.System.getProperty(Unknown Source)
     at com.sun.ba.common.QDebug.<clinit>(QDebug.java:39)
     ... 7 more
any help would be appriciated so much.
thanks
mehmad

Hi,
Please make changes in the java.security files present in the jdk1.3/lib/jre/security/java.security.There you make the changes in the property which gives you the error.See if this helps..
regards vickyk

Putting images in an applet - java.security.AccessControlException

Similar Messages

Maybe you are looking for