Security Exception in Applet

I'm trying to read a file on the server (from a JApplet) using FileReader and BufferedReader. When I run the applet i get:
java.security.AccessControlException: access denied (java.io.FilePermission config.dat read)Is there an easy way to get around this? I hope I don't have to speak to the serveradministrator!
/ernstad

A signed applet is needed to do that. Here's a search listing of the forums with other threads like yours:
http://search.java.sun.com/search/java/index.jsp?qp=&nh=10&qt=java.security.AccessControlException%3A+access+denied+%28java.io.FilePermission&col=javaforums&x=30&y=11

Similar Messages

Security Exception with applets

Hello,
How do I overcome the securityexception I face with applets? My appletviewer works fine when I try to read data from a local text file. But the browser doesn't seem to. It says access to the text file is denied!!!

Appletviewer works but only in debug, isn't it?
If you can read file from local, you must sign you applet by jarsigner tool contributed in your JDK.
If you have not certificate for sign, you can generate your own certificate:
1.generate key (name of the key will be tstkey)
keytool -genkey -keyalg rsa -alias tstkey
2. complete data
3. export key (will be in your current directory in file tstcert.crt)
keytool -export -alias tstkey -file tstcert.crt
4. make *.jar file
jar cvf MyApp.jar
5. check *.jar file
jar tvf MyApp.jar
6. sign applet
jarsigner MyApp.jar tstkey
7. check sign of applet
jarsigner -verify -verbose -certs MyApp.jar
Tha is all. At this moment is your applet signed and you can write or read local file.
BR
-koalix-

Signed applet throws security exceptions

Since nobody seems to be reading the Signe Applet forum, I decided to try here:
Hi all
I have problems with signed applet (self-made cert), and after reading this forum I see this is more or less common.
The problem that I am having is, that I can not use doPrivilege() and similar tricks, because applet needs to be Java 1.1 compatible.
So, signing will have to work.
Applet is signed using 1.5.0_06 jarsigner. Jarsigner verifies it OK.
It works on JVM 1.5.0_06 but not on 1.4.2_08.
Please help me make if work under any JVM.
The error I get is:
Java(TM) Plug-in: Version 1.4.2_08
Using JRE version 1.4.2_08 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\miha
Proxy Configuration: Automatic Proxy Configuration
     URL: http://orion.nil.si/proxy.pac
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
p:   reload proxy configuration
q:   hide console
r:   reload policy configuration
s:   dump system properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
java.security.AccessControlException: access denied (java.net.SocketPermission host.domain.dom resolve)
TelnetWrapper PROXY: java.security.AccessControlException: access denied (java.net.SocketPermission 127.0.0.1:0 connect,resolve)
java.lang.NullPointerException
     at net.propero.rdp.ISO.connect(ISO.java:123)
     at net.propero.rdp.MCS.connect(MCS.java:84)
     at net.propero.rdp.Secure.connect(Secure.java:153)
     at net.propero.rdp.Secure.connect(Secure.java:171)
     at net.propero.rdp.Rdp.connect(Rdp.java:498)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:615)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:222)
FATAL: java.lang.NullPointerException: nullWhat is funny, is that I have two applets, and one works and the other one doesn't. It is like this:
Applet A (signed) needs to connect to host1, fails and tries to connect through proxy using my proxy library (also signed - different JAR). Everything works.
Applet B (signed) needs to connect to host1, fails and tries to connect through proxy using the same proxy library. It gets a security exception.
All JARs are signed using the same key/certificate.
Both applets try to connect to the same "host1".
Both applets try to use the same proxy - which is different from "host1".
The one thing that might make a difference, is that in the working applet, everything is within one thread, and in the broken applet, the proxy object is in the main applet thread, and this applet may open many windows, that all utilize the same proxy object - only they can't.
When I tried to move the proxy object down to the child threads, I get the following exception:
Exception in thread "Thread-1952" java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPackageAccess(Unknown Source)
     at sun.applet.AppletSecurity.checkPackageAccess(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClassInternal(Unknown Source)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:567)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:211)It seems that I can only create the proxy object in the Applet.init() method, to avoid this exception.
So to, summarize: I would prefer just one object for all threads that I will create, but then my applet behaves like it is not signed (at least under JVM 1.4.2_08). Java 1.5.0_06 doesn't have any problems with this.
Regards, Miha Vitorovic

The one thing that might make a difference, is that in the working applet, everything is within one thread, and in the broken applet, the proxy object is in the main applet thread, and this applet may open many windows, that all utilize the same proxy object - only they can't.
When I tried to move the proxy object down to the child threads, I get the following exception:
Exception in thread "Thread-1952" java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)
     at java.security.AccessControlContext.checkPermission(Unknown Source)
     at java.security.AccessController.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPermission(Unknown Source)
     at java.lang.SecurityManager.checkPackageAccess(Unknown Source)
     at sun.applet.AppletSecurity.checkPackageAccess(Unknown Source)
     at sun.applet.AppletClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClassInternal(Unknown Source)
     at net.propero.rdp.Rdesktop.main_nonstatic(Rdesktop.java:567)
     at net.propero.rdp.applet.RdpThread.run(RdpApplet.java:211)It seems that I can only create the proxy object in the Applet.init() method, to avoid this exception.
So to, summarize: I would prefer just one object for all threads that I will create, but then my applet behaves like it is not signed (at least under JVM 1.4.2_08). Java 1.5.0_06 doesn't have any problems with this.
Regards, Miha Vitorovic

Should a signed applet ever throw a security exception?

hi,
I've had a few times when a signed applet seems to throw a security exception (at the moment am trying to figure out a SocketException being thrown).
I thought if the applet was signed, and when the browser asks if you want to grant it permissions you press Yes (which I do), then there should not be any security issues?
thanks,
asjf

A signed applet has to assert which permissions it wants. The client JVM then asks the user if they will give those permissions to the signer. If the applet tries to do something for which it hasn't been granted permission a security exception is thrown.

Security Exception executing a signed Applet

Dear All,
I get a security exception (file permission ) when i try to execute a signed applet using java plugin version 1.4.2._02, the same applet works good in java plugin version 1.3.1_04.
Any ideas...???
Thanks in advance
KSRK123

Although not a solution for us as we are tied to the 1.2.2 plugin for now, we did try out 1.3.1_10 and it worked fine without any modifications to cacerts.
Please see our listings (below) and let us know if anything comes to mind. I'm fairly new to this but I thought the whole idea with 1.2.2 was that we shouldn't have to mess with the cacerts or policy files on a clients machine. Rather the Root Certificate of the browser was used for verification??
http://forum.java.sun.com/thread.jsp?forum=32&thread=480668&tstart=0&trange=15
http://forum.java.sun.com/thread.jsp?forum=63&thread=480895&tstart=0&trange=15

Self signed Applet - still getting Security Exception...

Hi everyone...
I m new to Java Mail... Nd I m developing a Applet to send mail from my Gmail account, nd I used keytool, jarsigner to Self sign the applet. Nd I wrote a Html page and when calling my applet method using javascript, I m having Security Exception... And I m using Java 1.5 (i.e., J2SE 5)
Here is the sample of my code...
--------- MyMail.java -----------
import javax.mail.*;
import javax.mail.internet.InternetAddress;
import javax.mail.internet.MimeMessage;
And all neccessory packages are imported....
public class MyMail extends JApplet
     String server = "smtp.gmail.com";
     String username;
     String password;
     String fromAddres="";
     String toAddres="";
     Other Variable declaration goes here........
Session ses;
Transport tr;
MimeMessage msg;
     public void init() //For testing purpose
          doLogin("username","password"); //My account details
     public void doLogin(String user,String pass)
          username = user;
          password = pass;
          boolean success;
          fromAddres = user+"@gmail.com";
          toAddres = "[email protected]";
          subject = "TEst SubJect";
          body = "This is Test Mail";
          success = doAuthentication();
          if(success)
               setHeaders(server,username,password,fromAddres,toAddres,cc,bcc,htmlFormat,subject,body);
               sendMail(ses);
               doLogout();
     public void doLogout()
          //Deals with the logout from my account
     public boolean doAuthentication()
          //Deals with the authentication of my account
          // Setting properties, creating a session, getting transport object...
          //and returns true if authentication is success, false if not.
     public void setHeaders(String server, String username, String password, String fromAddress, String toAddress, String cc, String bcc, boolean htmlFormat, String subject, String body)
          //Sets the headers fields for the message (recieved through arguments)
     public void sendMail(Session ses)
          //Deals with sending mail
class MyPasswordAuthenticator extends Authenticator
     //Deals with the authentication of my account
---------- MyMail.html -----------
<html>
<head>
<script language=javascript>
function sendmail()
document.MyMail.doLogin("username","password"); //my account details
</script>
</head>
<body>
<input type=button name=but value=Send mail onclick=sendmail()>
<applet name=MyMail code=MyMail.class
archive=mail.jar,activation.jar,mailplus.jar width=0 height=0>
</applet>
</body>
</html>
And the applet is Self signed using the tools supplied from Java SDK...
it got signed...
And as the applet got loaded when i opend the MyMail.html, as i called the doLogin(..,..) in init() it is sending mail successfully...
The problem is.... As I given the action for my button to send mail (by calling java method from java script i.e., calling doLogin() when the button clicked) I m getting Security Exception
So...anyone plz tell me the solution....
Thnx in advance....
- Kanta

http://www.google.nl/search?hl=nl&q=site%3Asun.com+javascript+signed+applet&btnG=Google+zoeken&meta=
DoPrivileged would solve your problem but I've seen some cases where the
threaded (link mentioned below second post) mothod is the only way it'll work.
Signing applets:
http://forum.java.sun.com/thread.jsp?forum=63&thread=524815
second post and reply 18 for the java class file using doprivileged
Still problems?
A Full trace might help us out:
http://forum.java.sun.com/thread.jspa?threadID=656028

Unable to run a form(FOrms 5.0) on Web. Security exception E

Hi,
I am trying to run a simple form developed in Forms 5.0 over our
intranet.
Environment: On NT I am using Oracle 8.0.5, Developer/2000
Server and Internet Information Server 4.0.
I have created a simple form and deployed on the server.
(created the virtual directories for Java related directories as
per some documentation available with me). Made a small html
document containing the Applet definition to run this form. When
I tried to execute this, it gives the following security
exception error.
==============================================
com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
Clipboard access denied.
at com/ms/security/permissions/UIPermission.check
at com/ms/security/PolicyEngine.deepCheck
at com/ms/security/PolicyEngine.checkPermission
at com/ms/security/StandardSecurityManager.chk
at
com/ms/security/StandardSecurityManager.checkSystemClipboardAcces
s
at com/ms/awt/WToolkit.getSystemClipboard
at
oracle/forms/uiClient/v1_4/engine/Runform.initClipboard
at oracle/forms/uiClient/v1_4/engine/Runform.startRunform
at oracle/forms/uiClient/v1_4/engine/Runform.run
at java/lang/Thread.run
com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
Clipboard access denied.:Clipboard access denied.
Microsoft (R) VM for Java, 4.0 Release 4.79.0.2435
==============================================
? help
c clear
f run finalizers
g garbage collect
m memory usage
q quit
t thread list
==============================================
Can any body help me, where I might have gone wrong, either in
the development or deployment.
I am also, running Oracle Application server 4.0.7 on the
server, but I am not using the cartridge based deployment of
forms, beca, I could not find way to create Forms
application/Cartridge in it. If any one about it please help me.
Early response is highly appreciated.
Thanking you in advance ..// Manohar Reddy //
null

Hi Mobeen,
That is one thing that I wanted to know. How do I make Forms
Server to run as Service. Please explain me the
procedure/operation.
I am using IIS 4.0.
Do you have any Idea, how to implement the Cartridge version of
the Forms on OAS 4.0
Thanks for the information though ..// Manohar //
mobeen (guest) wrote:
: hi
: well u can run forms server asa service on NT then even if u
log
: out i wont terminate.
: which web server r u running
: mobeen
: Manohar Reddy (guest) wrote:
: : Thank you Mobeen for your time..
: : I was able solve the problem.
: : The problem was, my Forms Server(F50srv32.exe) was
terminating,
: : whenever I log out of that box. Now, I need to know, I to
make
: : that Process to run continuously, like a servece.
: : Another issue, which mentioned, in my y'days mail is, How to
: run
: : these forms as the CARTRIDGE method ? ..
: : Does any bdy can help me ..// Manohar //
: : Mobeen (guest) wrote:
: : : Hi
: : : i guesss u have not exported Dev2k.x509 for Developer/2000.
: : : copy Dev2k.x059 file to ur harddisk from the media
: : : then
: : : use javakey -c Developer/2000 true
: : : javekey -ic Developer/2000 Dev2k.x509
: : : it would generate identitydb.obj place that file in
: : /user/profile
: : : directory.
: : : plus u have to set forms60_mapping and forms60_output
: Registry
: : : Variables
: : : i hope that would sovle ur problem
: : : mobeen
: : : Manohar Reddy (guest) wrote:
: : : : Hi,
: : : : I am trying to run a simple form developed in Forms 5.0
: over
: : : our
: : : : intranet.
: : : : Environment: On NT I am using Oracle 8.0.5,
Developer/2000
: : : : Server and Internet Information Server 4.0.
: : : : I have created a simple form and deployed on the server.
: : : : (created the virtual directories for Java related
: directories
: : : as
: : : : per some documentation available with me). Made a small
: html
: : : : document containing the Applet definition to run this
form.
: : : When
: : : : I tried to execute this, it gives the following security
: : : : exception error.
: : : : ==============================================
: : : : com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
: : : : Clipboard access denied.
: : : : at com/ms/security/permissions/UIPermission.check
: : : : at com/ms/security/PolicyEngine.deepCheck
: : : : at com/ms/security/PolicyEngine.checkPermission
: : : : at com/ms/security/StandardSecurityManager.chk
: : : : at
com/ms/security/StandardSecurityManager.checkSystemClipboardAcces
: : : : s
: : : : at com/ms/awt/WToolkit.getSystemClipboard
: : : : at
: : : : oracle/forms/uiClient/v1_4/engine/Runform.initClipboard
: : : : at
oracle/forms/uiClient/v1_4/engine/Runform.startRunform
: : : : at oracle/forms/uiClient/v1_4/engine/Runform.run
: : : : at java/lang/Thread.run
: : : : com.ms.security.SecurityExceptionEx
[oracle/forms/uiClient/v1_4/engine/Runform.initClipboard]:
: : : : Clipboard access denied.:Clipboard access denied.
: : : : Microsoft (R) VM for Java, 4.0 Release 4.79.0.2435
: : : : ==============================================
: : : : ? help
: : : : c clear
: : : : f run finalizers
: : : : g garbage collect
: : : : m memory usage
: : : : q quit
: : : : t thread list
: : : : ==============================================
: : : : Can any body help me, where I might have gone wrong,
either
: : in
: : : : the development or deployment.
: : : : I am also, running Oracle Application server 4.0.7 on the
: : : : server, but I am not using the cartridge based deployment
: of
: : : : forms, beca, I could not find way to create Forms
: : : : application/Cartridge in it. If any one about it please
: help
: : : me.
: : : : Early response is highly appreciated.
: : : : Thanking you in advance ..// Manohar Reddy //
null

Stocks RMI example not working - Security Exception

Hi,
I was trying to run the "Stocks" RMI example that comes with
Weblogic server(see
http://www.weblogic.com/docs45/classdocs/API_rmi.html#clientside)
I compiled and configured the appropriate files, and tried to
load the sample applet (StockApplet.java) loaded on the
StockApplet.html page (using Microsoft IE browser).
However, the applet generated the following exception :
java.lang.ExceptionInInitializerError: com/ms/security/SecurityExceptionEx
     at weblogic/common/internal/TengahClassLoaders.registerURL (TengahClassLoaders.java:51)
     at weblogic/rjvm/RJVMImpl.loadFromCluster (RJVMImpl.java:1106)
     at weblogic/jndi/WLInitialContextFactoryDelegate.newContext (WLInitialContextFactoryDelegate.java:247)
     at weblogic/jndi/WLInitialContextFactoryDelegate.getInitialContext (WLInitialContextFactoryDelegate.java:205)
     at weblogic/jndi/Environment.getContext (Environment.java:122)
     at weblogic/jndi/Environment.getInitialContext (Environment.java:105)
     at weblogic/rmi/Naming.getContext (Naming.java:225)
     at weblogic/rmi/Naming.lookup (Naming.java:67)
     at examples/rmi/stock/StockApplet.init (StockApplet.java:127)
     at com/ms/applet/AppletPanel.securedCall0 (AppletPanel.java)
     at com/ms/applet/AppletPanel.securedCall (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.run (AppletPanel.java)
     at java/lang/Thread.run (Thread.java)
As you can see this looks like some sort of security exception. (StockApplet.java:127)
in the above exception is the line where StockApplet calls Naming.lookup(). So
I'm guessing it has something to do with it getting the Weblogic's RMI support
classes to the local VM and deserializing and installing them, which generates
a security exception.
What needs to be done to make the example work properly?
Thanks,
Leonid Portnoy
(In addition, two more types of exceptions are generated, which might be related
to the cause of the above exception. These exceptions are :
com.ms.security.SecurityExceptionEx[weblogic/rjvm/JVMID.setLocalID]: cannot connect
to "testserver"
     at com/ms/security/permissions/NetIOPermission.check (NetIOPermission.java)
     at com/ms/security/PolicyEngine.deepCheck (PolicyEngine.java)
     at com/ms/security/PolicyEngine.checkPermission (PolicyEngine.java)
     at com/ms/security/StandardSecurityManager.chk (StandardSecurityManager.java)
     at com/ms/security/StandardSecurityManager.chkex (StandardSecurityManager.java)
     at com/ms/security/StandardSecurityManager.checkConnect (StandardSecurityManager.java)
     at java/net/InetAddress.getLocalHost (InetAddress.java)
     at weblogic/rjvm/JVMID.setLocalID (JVMID.java:59)
     at weblogic/rjvm/JVMID.localID (JVMID.java:43)
     at weblogic/rjvm/LocalRJVM.getID (LocalRJVM.java:143)
     at weblogic/rmi/extensions/BasicServerObjectReference.<init> (BasicServerObjectReference.java:44)
     at weblogic/rmi/extensions/BasicServerObjectAdapter.<init> (BasicServerObjectAdapter.java:43)
     at weblogic/rmi/extensions/BasicRequestHandler.<init> (BasicRequestHandler.java:30)
     at weblogic/rmi/extensions/BasicRequestDispatcher.<init> (BasicRequestDispatcher.java:42)
     at weblogic/rmi/internal/OIDManager.initializeDGCServer (OIDManager.java:267)
     at weblogic/rmi/internal/OIDManager.getReplacement (OIDManager.java:176)
     at weblogic/rmi/internal/OIDManager.replaceObject (OIDManager.java:84)
     at weblogic/rmi/server/UnicastRemoteObject.exportObject (UnicastRemoteObject.java:25)
     at examples/rmi/stock/StockApplet.init (StockApplet.java:110)
     at com/ms/applet/AppletPanel.securedCall0 (AppletPanel.java)
     at com/ms/applet/AppletPanel.securedCall (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.run (AppletPanel.java)
     at java/lang/Thread.run (Thread.java)
and
com.ms.security.SecurityExceptionEx[weblogic/jndi/Environment.getProperty]: Unable
to access system property: weblogic.jndi.provider.rjvm
     at com/ms/security/permissions/PropertyPermission.check (PropertyPermission.java)
     at com/ms/security/PolicyEngine.shallowCheck (PolicyEngine.java)
     at com/ms/security/PolicyEngine.checkCallersPermission (PolicyEngine.java)
     at com/ms/security/StandardSecurityManager.chk (StandardSecurityManager.java)
     at com/ms/security/StandardSecurityManager.checkPropertyAccess (StandardSecurityManager.java)
     at java/lang/System.getProperty (System.java)
     at weblogic/jndi/Environment.getProperty (Environment.java:598)
     at weblogic/jndi/Environment.getProviderRJVM (Environment.java:691)
     at weblogic/jndi/WLInitialContextFactoryDelegate.getInitialContext (WLInitialContextFactoryDelegate.java:166)
     at weblogic/jndi/Environment.getContext (Environment.java:122)
     at weblogic/jndi/Environment.getInitialContext (Environment.java:105)
     at weblogic/rmi/Naming.getContext (Naming.java:225)
     at weblogic/rmi/Naming.lookup (Naming.java:67)
     at examples/rmi/stock/StockApplet.init (StockApplet.java:127)
     at com/ms/applet/AppletPanel.securedCall0 (AppletPanel.java)
     at com/ms/applet/AppletPanel.securedCall (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.processSentEvent (AppletPanel.java)
     at com/ms/applet/AppletPanel.run (AppletPanel.java)
     at java/lang/Thread.run (Thread.java)

Can you post the Stock Applet and other source files...
Jamal
([email protected])

Help! JDOM SAXParserFactory causing Security exception in Microsoft Java VM

Hiya all, I'm really hoping you can offer me a hand with this problem.
I'm having a problem with SAXParserFactory causing a security exception in
Microsoft Internet Explorer, using JDOM b7.
here is the error string it spits out:
String...com.ms.security.SecurityExceptionEx[javax/xml/parsers/SAXParserFact
ory.newInstance]: Unable to access system property:
javax.xml.parsers.SAXParserFactory
at com/ms/security/permissions/PropertyPermission.check
(PropertyPermission.java)
at com/ms/security/PolicyEngine.shallowCheck (PolicyEngine.java)
at com/ms/security/PolicyEngine.checkCallersPermission (PolicyEngine.java)
at com/ms/security/StandardSecurityManager.chk
(StandardSecurityManager.java)
at com/ms/security/StandardSecurityManager.checkPropertyAccess
(StandardSecurityManager.java)
at java/lang/System.getProperty (System.java)
at javax/xml/parsers/SAXParserFactory.newInstance
(SAXParserFactory.java:139)
at java/lang/reflect/Method.invoke (Method.java)
at org/jdom/input/SAXBuilder.createParser (SAXBuilder.java)
at org/jdom/input/SAXBuilder.build (SAXBuilder.java)
at org/jdom/input/SAXBuilder.build (SAXBuilder.java)
at aim/AIMPanel.parseXML (AIMPanel.java:673)
at aim/AIMPanel.serverCall (AIMPanel.java:486)
at aim/LogicalAIM.<init> (LogicalAIM.java:62)
at aim/AIMPanel.customInitialize (AIMPanel.java:1595)
at shout3d/Shout3DPanel.n (Shout3DPanel.java)
at shout3d/Shout3DPanel.run (Shout3DPanel.java)
at java/lang/Thread.run (Thread.java)
Using Microsoft's 5.0.0.3802 VM, this error results in a NullPointer
Exception further down, causing the app to quit.
in 5.0.0.3310, it reports the error but continues to run.
in 5.0.0.3234, no errors are reported at all.
Do you guys have any idea what's going on and why, and what I might be able
to do to correct this?
Any help is greatly appreciated...
-J

The factory classes (DocumentBuilderFactory and SAXParserFactory) use a Systems Property to determine which parser to use. Since applets do not have access to the Systems properties, a security exception is usually thrown.
I have not done work with Applets that use JAXP, however I would bet if you search this forum you will find other who have had this problem along with a possible work around.
Hope this helps.

Mac OS (only) security exception

I have seen on the server that this applet is requesting java components like java.util and META-INF etc straight off the root of the host that is hosting the applet.
Why does java do this on the mac, because the server is replying NO YOU CANT HAVE THAT COMPONENT BECAUSE I DONT HAVE IT, and the cakephp thing I have is also thinking to itself (what on earth is this applet guy asking me for java components for) and to be honest so is the developer, and then my friend mac gets upset and dies with security exception. (e.g Java.util package prohibited).
Windows doesn't do it and neither does vista and the applet runs ok.
On mac, the webstart version works ok but still requests the stuff from the server but feels a bit better about continuing on and launching the app.
This is driving me up the wall.

Hello,
On my PowerPC G5 I have a similar issue where I installed Mac OS X 10.5.6, but after installing the iphone SDK I do not see any refs to iphone when in Xcode.
I even tried the suggestion here:
http://3by9.com/85/dont-have-an-intel-machine-but-want-to-code-for-the-iphone-an yway-follow-these-steps/
This however, resulted in the same issue.
Any suggestion on how to resolve this would be most appreciated.

Plug-In 1.3 grant permissions / security exception

Hi,
we have an signed applet that request a file on user disk and get the following security exception on Netscape 7.0.
We are using the JRE 1.3.1_04 Plug-In.
java.security.PrivilegedActionException: java.lang.reflect.InvocationTargetException: java.security.AccessControlException: access denied (java.io.FilePermission A:\ read).
I read that I must create a policy-file and grant the permission that I need.
I changed the jre\lib\security\java.policy and grant "permission java.security.AllPermission;" all permissions and it works.
But how can I avoid that each customer must edit his jre\lib\security\java.policy or add a new policy file in this directory ?
Is it possible to add a policy file to the applet jar that I deliver to the customer and that is used by the permission check by the JRE.
When using the PlugIn I thought that I don't need any java code to set explicit privileges inside the applet, like PrivilegeManager.enablePrivilege("UniversalFileAccess") (in NS) or PolicyEngine.assertPermission(PermissionID.FILEIO) (in IE) ?
Also, when I used IE 5.0 (without changes to the java.policy file) I don't get a security exception when the applet request the floppy disk. Why that ?
Regards
Michael

Dear Michael ,
I encounter similar problem. Do you have any finding or solution?
regards,
Ken Wat

Turn off security exceptions in Internet Explorer

When I want to read files with my applet using IE, I always get a security exception, though I've granted everything possible for unsigned applets !!!
please help!!!
any help is appreciated.
cu
oliver

You still cant ignore the rules of the sandbox. Unsigned applets will be constrained by the rules even when disabling all security in IE.
Do a search for sandbox and you will find many posts about this.

Java Doesn't Function, Security Exceptions

I'm running Windows XP Pro SP2, and trying t use Java 1.6.0 Build 5. Whenever I come across a Java app inside of FireFox 2.x, I recieve the following three error messages:
Security Exception
java.security.PrivlegedActionException: java.io.IOException: The system cannot find the path specified
Details:
java.security.PrivilegedActionException: java.io.IOException: The system cannot find the path specified
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.openInputStream(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.getAllPersistedCredentials(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.access$000(Unknown Source)
     at com.sun.deploy.security.CredentialManager.<init>(Unknown Source)     at com.sun.deploy.security.MSCredentialManager.<init>(Unknown Source)
     at com.sun.deploy.security.MSCredentialManager.getInstance(Unknown Source)
     at com.sun.deploy.services.WPlatformService.getCredentialManager(Unknown Source)
     at com.sun.deploy.security.DeployAuthenticator.<init>(Unknown Source)
     at sun.plugin.AppletViewer.initEnvironment(Unknown Source)
Caused by: java.io.IOException: The system cannot find the path specified
     at java.io.WinNTFileSystem.createFileExclusively(Native Method)
     at java.io.File.createNewFile(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor$1.run(Unknown Source)
     ... 10 more
Security Exception
java.lang.NullPointerException
Details:
java.lang.NullPointerException
     at java.io.ObjectInputStream$PeekInputStream.read(Unknown Source)
     at java.io.ObjectInputStream$PeekInputStream.readFully(Unknown Source)
     at java.io.ObjectInputStream$BlockDataInputStream.readShort(Unknown Source)
     at java.io.ObjectInputStream.readStreamHeader(Unknown Source)
     at java.io.ObjectInputStream.<init>(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.getAllPersistedCredentials(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.access$000(Unknown Source)
     at com.sun.deploy.security.CredentialManager.<init>(Unknown Source)
     at com.sun.deploy.security.MSCredentialManager.<init>(Unknown Source)
     at com.sun.deploy.security.MSCredentialManager.getInstance(Unknown Source)
     at com.sun.deploy.services.WPlatformService.getCredentialManager(Unknown Source)
     at com.sun.deploy.security.DeployAuthenticator.<init>(Unknown Source)
     at sun.plugin.AppletViewer.initEnvironment(Unknown Source)
Security Exception
java.lang.NullPointerException
Details:
java.lang.NullPointerException
     at java.io.ObjectInputStream$PeekInputStream.read(Unknown Source)
     at java.io.ObjectInputStream$PeekInputStream.readFully(Unknown Source)
     at java.io.ObjectInputStream$BlockDataInputStream.readShort(Unknown Source)
     at java.io.ObjectInputStream.readStreamHeader(Unknown Source)
     at java.io.ObjectInputStream.<init>(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.getAllPersistedCredentials(Unknown Source)
     at com.sun.deploy.security.CredentialManager$CredentialPersistor.access$000(Unknown Source)
     at com.sun.deploy.security.CredentialManager.<init>(Unknown Source)
     at com.sun.deploy.security.MSCredentialManager.<init>(Unknown Source)
     at com.sun.deploy.security.MSCredentialManager.getInstance(Unknown Source)
     at com.sun.deploy.services.WPlatformService.getCredentialManager(Unknown Source)
     at com.sun.deploy.security.DeployAuthenticator.<init>(Unknown Source)
     at sun.plugin.AppletViewer.initEnvironment(Unknown Source)
Then the tabs on my FireFox freeze up, and I have to quit FireFox, kill it in Task Manager, and then restart FireFox to continue working. I've tried re-installing Java, and that hasn't helped. How do I fix my Java install? Thanks.
Edited by: MSTCrowT on Feb 13, 2008 7:13 PM

hi
i guess you are trying to access local file from applet.
refer this link.. hope this will help you.
http://www.google.com/search?q=read+local+file+from+APPLET&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-
regards
Aniruddha

Untrusted Connection - when I try to add a security exception, NOTHING happens

A game company Web site I go to all the time has just started giving me Untrusted Connection messages. I was able to visit it with no problems as recently as a few hours ago, but now I just get a page that says "You have asked Firefox to connect securely to [site], but we can't confirm that your connection is secure" and goes on to explain about security certificates and so on.
When I click "I understand the risks" then "Add exception", an "Add Security Exception" dialog box comes up as expected. However, when I click "Confirm Security Exception" on that dialog box (with or without clicking "Get Certificate" first), LITERALLY NOTHING happens. I don't mean I get an error message, or some result I'm not expecting, or even that the dialog box disappears. When I say nothing happens, I mean quite literally NOTHING happens. The button is not greyed out, yet clicking it has absolutely no effect. This leaves me with no means of closing the dialog box except clicking "Cancel", and therefore no means of accessing the site.
I've seen similar problems mentioned on this site, but mostly they either have the button greyed out (mine isn't) or they get a conflicting message saying the certificate is fine and doesn't need replacing (I don't). I have not seen anyone else post about my version, where everything looks normal and internally consistent yet the "Confirm Security Exception" button is non-functional.
This is not the first time I've had this problem, but it's the most annoying in that this time, it's affecting a site I normally visit several times a day rather than one I don't care that much about. As far as I recall, in my hands the "Confirm Security Exception" button has NEVER functioned, with the problem even surviving a near-total replacement of the hardware including the hard drive Firefox lives on.

Make sure that you do not run Firefox in (permanent) Private Browsing mode (Never Remember History).
*https://support.mozilla.org/kb/Private+Browsing
*Tools > Options > Privacy > Firefox will: "Use custom settings for history"
*Deselect: [ ] "Always use private browsing mode"
Check out why the site is untrusted (click "Technical Details to expand that section) and if this is caused by a missing intermediate certificate then see if you can install this intermediate certificate from another source.
You can retrieve the certificate and check details like who issued certificates and expiration dates of certificates.
*Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
*Click the "View..." button and inspect the certificate and check who is the issuer of the certificate.
You can see more Details like intermediate certificates that are used in the Details pane.
If "I Understand the Risks" is missing then this page may be opened in an (i)frame and in that case try the right-click context menu and use "This Frame: Open Frame in New Tab".
Note that some firewalls monitor secure (https) connections and send their own certificate instead of the website's certificate.

How can I get Firefox to load pages properly and stop asking me to add every single page I visit as a "security exception"?

I just downloaded the newest version of Firefox today because it is required for some of the websites I need for my college courses. However, every single website I go to (even the Mozilla site, Google, etc.) says that there's an "untrusted connection." On some sites I have an option between "Get me out of here!" or to add this particular site as a security exception. As you can probably imagine, this is very time consuming and frustrating. I have uninstalled the program (clean uninstall) and reinstalled it. I have reset Firefox, and nothing helps. The problem persists in Safe Mode as well. Along with this issue, every website I manage to get access to is all kinds of messed up. Modules are missing, or the whole page is blank. It can sit there for an hour and nothing loads. I have a good internet connection and fast processor. I was using Chrome before, and Internet Explorer with no issue. About two years ago I used Mozilla Firefox on this same computer and had no issues. I have a 64-bit system, which is the only issue I can think might be causing this problem. I have gone through and tried changing just about every setting, and nothing has helped. I am at my wit's end because I have homework to do and can't because of this problem.

Glad it is fixed. Thanks for posting back, (even if we are not sure exactly what happened).

Security Exception in Applet

Similar Messages

Maybe you are looking for