Question about Applet Securities / Permissions

Hi,
I'm about to begin work on a program that will utilize GData API to communicate with Google Calendars. I was wondering if this is going to be allowed in an applet, or if I would have to create it as a Java Application.
I was looking at: http://java.sun.com/docs/books/tutorial/deployment/applet/security.html
where it says "It cannot make network connections except to the host that it came from."
I was wondering if that means I wouldn't be able to use to GData API to retrieve/create events in a Google Calendar.
Thank you,
Christopher

Welcome to the Sun forums.
elwell.christopher wrote:
I was wondering if that means I wouldn't be able to use to GData API to retrieve/create events in a Google Calendar.Cool. Be sure to report the results of your experiment to test that. I'm sure others will be interested. And of course, feel free to drop back by if you have a question.

Similar Messages

Security permissions question about Applets

Hello all.
I'm wanting to make an address book on my server, so I need to have it write to a file. I've read a bunch about it, and still can't figure it out.
I'm not exactly sure what the java home is supposed to be. I created a java.policy file in /usr/lib/j2sdk1.5-sun (I'm on Linux), but I think it might belong in /usr/lib/j2sdk1.5-sun/jre or /usr/lib/j2sdk1.5-sun/jre/lib/security
I'm also not exactly what the java.policy file is supposed to contain. Currently, it is:
grant codeBase "file:/home/scott/public_html/address_book/old/*" {
permission java.io.FilePermission "/home/scott/public_html/address_book/old/Test.txt", "write";
};Anyone want to help?
Scott Howard

I'm wanting to make an address book on my server, so I need to have it write to a file.Well, applets run on the client - the browser which downloaded the class files - and therefore cannot access files on the server without some type of networking.
Caveat - the client and server are the same physical machine.
Solution - have your applet communicate back to the server it originates from. No policy twiddling is needed, as this is an automatic permission.

[SOLVED Noob question about web server permissions

Hi I have setup up succesfully my web server. Now I am having some permission's questions/problems.
First of all, I want the /home/httpd/home folder not to be show to the other machine users and only to root.
I have created a user www-data and I have conf the apache file.
This is my settings:
My server directory is: /home/httpd and the permissions I have set:
home dir:
~edited because solved~
I have set .htaccess to some folders. I don't know If the permissions are safe or not. Can you help me?
I think that I have different permissions to files and different to the folders...
Thank you!
Edited:
And an example of my permission (phpMyAdmin):
~edited because solved~
Last edited by k3rn31 (2008-02-28 22:26:09)

This is more of a chat item for me, if you feel like it you can find me most of the time here at http://zaxter.org/xmpp.html if you have flash you can join via a simple click on connect.
Sorry I've not been of much help to you.

Three questions about applets

First I double click the html file, and then it opens up Internet Explorer but the information bar says:
To help protect your security, Internet Explorer has restricted this file from showing active content that could access your computer. Click here for options... so I click it and have to allow the blocked content.
Question 1: Is there anything I can do so that it doesn't block my applet?
Now on the Internet Explorer page my applet shows, but it doesn't have a background.
Question 2: Why isn't the background showing?
If there is a problem, it would probably be in here:
public void actionPerformed (ActionEvent e)
     processButton(e.getActionCommand());
void processButton(String command)
     if(!command.equals("a"))
            setNumSqFt();
         setAllLabels();
         repaint();
    public void init()
   try
     setLayout(new GridLayout(1, 0));
          WorkOK().setOpaque(false);
            WorkOK().setSize(new Dimension(600, 400));
         JScrollPane sp = new JScrollPane(WorkOK());
          sp.getViewport().setOpaque(false);
     add(sp);
         sp.setOpaque(false);
         String url = "http://i93.photobucket.com/albums/l45/dazednconfused101/tile.gif";
         setSize(800,500);
         setVisible(true);
         Border bckgrnd = new CentredBackgroundBorder(ImageIO.read(new URL(url)));
          sp.setViewportBorder(bckgrnd);
            sp.repaint();
     catch (MalformedURLException e)
              System.err.println("FileNotFoundException: " + e.getMessage());
     catch (IOException e)
              System.err.println("Caught IOException: " + e.getMessage());
public void start(){
     System.out.println("Applet starting.");
public void stop(){
     System.out.println("Applet stopping.");
public void destroy(){
     System.out.println("Destroy method called.");
}Now for Question 3: How do I fix this?
Thanks in advance

For Question 1 ,
Question 1: Is there anything I can do so that it doesn't block my applet?If you want to run active content/applet in all files on your hard disk, then you need to open menu Tools / Internet Options / Advanced tab / Security section and make sure that "Allow active content to run in files on My Computer" is checked.

General question about Applets!

Hi,
I have a Win program I need to upgrade as a Web one.
So, I'm not sure whether I should use an applet whetther do it with JSPs...
I've used Java applets 4 years ago and I met some printings, (very)long downloading, security, ...problems.
Obviously, the graphic result would be much better for me with an applet but could you please tell me if Java applets for Java 1.4.1 is more reliable that it used to be. Otherwise, I would finally choose JSP technology :-)
Thx in advance,
-G-

the graphic result will probably not be better with applets at all. They exist to make it far easier to port java programs to the net, but they are pretty horrible to use as a result (as you have experienced). Problem is, users don't care about what makes it tick, they just see them as slow and generally rubbish. I would use JSPs or servlets, which are a far better use of Java's power. However, you will need to do more work. They can both call out to external classes and beans, so you can reuse that way, but obviously you will need to have a think about how to restructure the I/O. You just have to look at skills demands to see whats good and whats not... just about every java job now asks for J2EE (servlet, JSP and other stuff) skills, but when was the last time you saw a job ask for applet skills?!

Some question about applet

how to close the IE window which contain the applet when the user click some button on the applet?
and how to modify the IE window's size, position and title?
thx very much

I would add some JavaScript or VBScript to the page
and have your java applet call the javascript
function.
JavaScript has acces to close the browser and to
change the windows size, location, attributes (ie make
it full screen, etc)
You can use the JSObject from netscape...
to allow your Applet to interact with javascript...thx very much

Basic question about applets

Hi,
Can someone tell me when you run an applet on a web page where does it run??.. Does it run from the server or does the client browser download a copy a run it from there. Is there a good web site that explains all of this..
Thanks
Joolz

the client browser download the applet from the server and run the applet on the client side (this is why you need a JVM to run the applet)

Strange question: about Applet

My applet only import:
import java.applet.*;
Why it said "class not found" when loaded it in browser?

I have tried in IE6 and IE5.5,they can't load the class file too,
and if I use the java plugin,it works ok.
But my program import nothing not include in jdk1.1,
so it's too strange.
I am sure the file in that directory and
no error or warning when compilation.
what browser are you using?
some possible reasons:
1.the browser is using lower version of vm than the
development enviroment
2.the applet files are not in that directory
3.something wrong in your html file
by the way, did your applet work in IE?

Question about firefox permissions for sites

i have a question about sites permissions
in google chrom it is easy to set permission for each site like (java, flash plugin, image , ...)
http://i58.tinypic.com/nl66v9.png
but i prefer to use firefox
is there any addon or something else to have this options in firefox ?

You can inspect and manage the permissions for the domain in the currently selected tab via these steps:
*Click the "[[Site Identity Button|Site Identity Button]]" (globe/padlock) on the location/address bar
*Click "More Information" to open "Tools > Page Info" with the Security tab selected
*Go to the Permissions tab (Tools > Page Info > Permissions) to check the permissions for the domain in the currently selected tab
You can inspect and manage the permissions for all domains on the <b>about:permissions</b> page.
*https://support.mozilla.org/kb/how-do-i-manage-website-permissions

Another one question about how to download applet (not using external tool)

Hi
i write tool for downloading applet on card. I use apdu trace from NXP eclipse plugin as source of information and i read also about cap-file format in Java Card Virtual Machine specification. And i have questions about data transferred by LOAD command.
As example - from apdu trace i see that transferred data are "C4820E33 DATA1 DATA2". Full length of transferred data is 0x2EE2.
C4 - OK, this is "Load File Data Block" tag as specified in Global Platform
820E33 - OK, this length of tag, =0x0E33
DATA1 - sequence of cap-file components: Header.cap, Directory.cap, Import.cap, Applet.cap, Class.cap, Method.cap, StaticField.cap, ConstantPool.cap, RefLocation.cap. Length of DATA1 is 0x0E33, i.e. DATA1 = 'C4'-tag value.
DATA2 - sequence of two cap-file components: Descriptor.cap and Debug.cap. These components are out of 'C4'-tag.
the questions mentioned above... here they are:
1. Global Platform does not define any data in LOAD command except 'E2' and 'C4' tag. Why DATA2 is transferred out of any tags?
2. Whether the sequence of cap-file components is important? i.e. Can i load Header.cap, Directory.cap etc. in other order than i see in DATA1 field from apdu-trace?
3. Debug.cap seems to be optional component. And what about Descriptor.cap component? Need i load it on card?

666 wrote:
1. Global Platform does not define any data in LOAD command except 'E2' and 'C4' tag. Why DATA2 is transferred out of any tags?Because the components are either optional or only required when communicating with a JCRE that has debugging capabilities. I assume you ran the project in JCOP Tools in debug mode against the simulator? If you did this against a real card it would fail as it does not have an instrumented JCRE capable of debugging code. You could try running the project as opposed to debugging to see the difference.
2. Whether the sequence of cap-file components is important? i.e. Can i load Header.cap, Directory.cap etc. in other order than i see in DATA1 field from apdu-trace?Yes it is. It is defined in the JCVM specification available from the Oracle website.
3. Debug.cap seems to be optional component. And what about Descriptor.cap component? Need i load it on card?No, it is optional and is not referenced by any other CAP file component.
Cheers,
Shane

Question about permissions in portal content

Hi all,
I'd like to ask you guys a question about permissions given to pages in the portal content (EP 6.0).
When a user accesses a page that contains an iView (for example one for a Web Dynpro, or for a BSP), and the page permissions are correctly set for the user (or a group the user is member of), everything works fine and the user can see and use the application contained in the iView.
If the Page has no permissions set and the user tries to access this page, an empty page appears instead and the "Detailed Navigation" column appears on the left.
I know I should not let the user see the link to the page he is not authorized to use (this is done managing the roles given to the user), but I'd like to know from you if it is possible to show a message like "unauthorized user" instead of the empty page that appears.
Can you also tell me how to keep the "Detailed Navigation" column hidden on the extreme left?
Thank you for any hint you can give to me.
Lorenzo

Hi Lorenzo,
a way how you might go ahead and hide or show content for specific user groups is via roles merging (see documentation <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm</a>
In essence, this means that you create for example 2 roles (A and B): A contains some content everyone can see, B more secure content for another group. You merge those 2 roles via a merge ID - and if a user has both roles, he sees the content in this workset with all the navigation options. If somebody only has role A, he will only see this content.
Maybe this is someting that could help with you considerations (always depending on the number of items that are affected, this might be a useful way, or leading to too much confusion, because you have too much different roles).
Best regards
Jana

Question about Removing Permissions from the System Folder with chmod

Hi
I have a question about the removal of permissions from the System folder (and sub directories and files).
Background
Since installing a new HD, clean install of 10.6, application of updates and moving over backed up user directories I have had several issues with permissions.
I have read several threads on this and using disk warrior and other tools I have been able to fix most of the issues.
The Problem
The issue that remains is a permissions check using Disk Utility keeps reporting
ACL found but not expected on "System".
followed by an extensive list of sub directories and all.
Attempts to repair take hours and the same errors are reported.
Found Solutions
I have read about changing and/or completely removing the ACL from the permissions from the System using two different commands:
sudo chmod -R -N ./System/* ( to remove all ACLs)
or
sudo chmod -R -E ./System/* ( to replace all ACLs )
My Question is ( to the UNIX gurus):
What is the difference between the usage with -E and -R and which is the best approach for a Systems directory and (subordinates)?
Many thanks!!

OK
So I misread on the your instructions about the PW reset, did it, no harm in that. I did also select the options to reset all the permissions for all the accounts and the ACL issues were not resolved. My bad, I forgot to note that.
You do suggest getting and expert opinion but alas these are rather elusive. In most cases the Apple solutions is to do a complete reinstall... I have found that unless you completely wipe a drive and rebuild everything there are often artifacts left behind. Since I have full and redundant back-ups I would rather explore and hack a little instead of a dull old system reinstall. The irony is the system issue I had was it was the result a reinstall and combo update on a new drive. I recognize the risks of entering the realms of the System folders but I am willing to explore knowing full well that I have a path to recovery.
Thanks again for your insights. I come to the forums looking for insights and ideas but not a lecture...

Some basic questions about an applet

Hi all,
I am planning to make a project in JAVA and I have some problems, which I need to solve. I am not a total beginner in JAVA but I have never made an applet. So I need to know if it is possible to make an upload of files from clients computers to servers and the second problem is if there will be some problems with printing services and applets?
Thank you all for your helpfull replies.

Read all about Applets' capabilities and (perhaps even more) incapabilities here:
http://java.sun.com/docs/books/tutorial/deployment/applet/index.html

A question about design of Java Application on java card.

Hi every one,
I have a question about design of Java applet on java card,
There is an application on my card that it is not java card, it include a DF and some EF under DF, I would like to know if I want to have this application on java card ,how can I design DF and EF on java card ,I mean is there any relation between DF,EF with applet and file? for example can I say DF is same as applet and EF is same as file?
I'll appreciate for any help .
yours sincerely,
orchid

hi
you can write a java class for DF.
an instance of DF class have some EF objects.
for example,
samples/com/sun/javacard/samples/JavaPurse/CyclicFile.java
implements ISO 7816 CyclicFile ( EF )
see also:
http://forum.java.sun.com/thread.jspa?threadID=673745&messageID=3936272
best regards,
siavash

Some random questions about integration features

Greetings,
after working for a few weeks with Autovue's ISDK (web server) and having some sucess with its integration with our custom CMS, I have a few random questions about what can be done and what can't be done. So, instead of opening many new threads, I'll post them here together.
1) Translation. We are localised in Russia, and its translation is incomplete. I have found a tra_en.properties file in AutoVue/bin, and a description about how to create a properties file for custom actions. But no information about how to translate to other languages - and russian translation appears to be packed within the jar of the applet. Is there a clean way to translate, or refine the current translation, so we don't get a mix of russian and english commands in the applet? Because my tries using EXTRABUNDLES have failed, as I don't want to add a bundle for extra actions, but to replace it for existing ones.
2) Attachments in markups. Markups allow to attach other files, but since our CMS is custom, we only get the option to attach files from our local drives. We did no browse integration with the CMS, as people with different levels of permission will have different access to files there, and we considered unnecessary to provide that level of integration. We are considering to remove this action from the GUI, but before that I'd like to evaluate how hard would it be to generate an upload file action, so the attached file would be stored in the custom CMS and linked to it so the whole thing worked. My guess is "it will be hard and time consuming", so for now, we are considering to delete this feature in our integration.
3) Is there a way to resize the Open markup dialog? We have several properties displayed, and fit well within a standard screen, but the dialog is small and you have to scroll the table to see all properties.
Thanks for any assistance with these issues

As always, thanks for the fast answer, Artash.
Yes, now I see attachments are stored inside the markup file. The problem is, when I open markup mode for the attachment, since the attachment uses some kind of default access method, my url's from the integration with the background CMS are broken completely. I believe the ideal state here would be to make some kind of inner markup for the attachment, maybe stored within the original markup file along the attached file. Or maybe it works that way, and I need to access it with the default gui action instead of my custom one. If that is the case, is there any way to tell the gui file how to differentiate a standard opened file from an attached one? If so, the issue has solution. If not... Well, then maybe something escapes me.
Edited by: Jordi Bosch on Apr 6, 2012 12:27 AM

Question about Applet Securities / Permissions

Similar Messages

Maybe you are looking for