Security restrictions , how to read access a txt file supplied in a jar

Question

I had written a simple application which uses file handling to display random line from a file on a swing window
but I do not know how to give my web application permission to access a file
when I set security permission to all, then error says the application cannot load because the code require unrestricted acess to system resources and is unsigned, I don't know how to get that certificate and I am only doing it for learning purposes.
when I remove security permissions then it says
access denied java.io.FilePermissions geekjoskes.txt readPlease help
I locally signed the jar file, and give my jnlp fiel all permissions, worked fine in my system but when I access same file from local lan it sho errors ,
please help, I have my txt file stored in my jar file with main class
the whole jnlp file is
<?xml version="1.0" encoding="utf-8"?>
<!-- JNLP File for geek jokes -->     
<jnlp spec="1.0+"
       codebase="http://localhost/javasoft/webstart/"
      href="geekjokes.jnlp">
   <information>
      <title>Geek Jokes</title>
      <vendor>Vaibhav Mishra</vendor>
      <description>Geeky jokes</description>
      <homepage href="http://scjpbeginner.blogspot.com"/>
      <description kind="short">shows random jokes</description>
      <offline-allowed/>
   </information>
   <resources>    
        <jar href="GeekJokes0.1.jar"/>  
     <j2se version="1.6+"
           href="http://java.sun.com/products/autodl/j2se"/>
     <icon href="geekjokes.gif"/>
   <icon kind="splash" href = "geekjokes.gif"/>
   </resources>
   <security>
      <all-permissions/>
   </security>
   <offline-allowed/>  
   <application-desc main-class="GeekJokes"/>
</jnlp>Edited by: 76jsr on Aug 7, 2008 3:45 PM
Edited by: 76jsr on Aug 7, 2008 3:49 PM

Answer 1

>
I am extremely thankful to you and finally my first little app is working thanks to you,
here is it's link
[http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes/geekjokes.jnlp|http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes/geekjokes.jnlp] >
I am glad you got it working! But that launch file is still slightly invalid.
Here is a corrected, and slightly optimized (you can leave the prefix off the href, if it is the same as the codebase), version of it.
<?xml version="1.0" encoding="utf-8"?>
<!-- JNLP File for GeekJokes 0.3 app -->
<jnlp spec="1.0+"
      codebase="http://profile.iiita.ac.in/IIT2006117/javasoft/webstart/geekjokes"
      href="geekjokes.jnlp">
   <information>
      <title>GeekJokes App</title>
      <vendor>Vaibhav Mishra</vendor>
      <homepage href="http://scjpbeginner.blogspot.com"/>
      <description>Geeky Jokes</description>
      <description kind="short">Cshows random jokes</description>
      <offline-allowed/>
   </information>
   <resources>
       <j2se version="1.6+"
           href="http://java.sun.com/products/autodl/j2se"/>
       <jar href="GeekJokes0.3.jar"/>
   </resources>
   <application-desc main-class="Process"/>
</jnlp>Very 'Geeky', BTW. ;-)
Another few things I noted when I looked at it.
1) There is a stray thread going after the JOptionPane is dismissed. The VM does not end, and the console (if you have it configured to pop-up for JWS apps.) stays on-screen.
2) If all the jokes are prefixed by '* ' I would recommend removing it from every line of the source file and either re-adding it at runtime, or (preferably) not adding it at all (since it is redundant).
3) Reconfigure the app. into a loop, and offer the user a JOptionPane with "Another Joke"/"End" instead of "OK".
4) You can always remove that debugging line I inserted in the code to show the path to the Jar - it was just intended as a 'sanity check' during testing.
5) Why is it Java 1.6+? JOptionPane was introduced in Java 1.2 with the first Swing implementations, and the I/O is compatible with Java 1.1.
>
Thanks again!!!!>Thanks are best expressed (to me) in the notation of a helpful/correct answer (which you have done), and the assignation of (the remaining) dukes*. ;-)
* After all - checks the title - we have gotten entirely around those 'security restrictions' in a sandboxed application. The reason being that File objects are rarely the correct choice, for applets or JWS apps.