Setting up permissions...should I, and how?

Question

I have a servlet that reads images from a database. When the image isn't there, I want to read a default image.
Now, I know that I can have a default image on disk, but since there is already a default image inside of the resource of my web app, I thought that it would be best to read it from there. When I try that though I get this:
[#|2005-06-20T15:13:50.917-0500|INFO|sun-appserver-pe8.0.0_01|javax.enterprise.system.stream.out|_ThreadID=16;|
access denied (org.apache.naming.JndiPermission jndi:/server/myapp/resources/noimage.JPG)|#]
[#|2005-06-20T15:13:50.917-0500|WARNING|sun-appserver-pe8.0.0_01|javax.enterprise.system.stream.err|_ThreadID=16;|
java.security.AccessControlException: access denied (org.apache.naming.JndiPermission jndi:/server/myapp/resources/noimage.JPG)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:269)
at java.security.AccessController.checkPermission(AccessController.java:401)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:524)
at sun.awt.SunToolkit.getImageFromHash(SunToolkit.java:437)
at sun.awt.SunToolkit.getImage(SunToolkit.java:490)
at javax.swing.ImageIcon.<init>(ImageIcon.java:119)
The code I'm using looks like this:
   URL imageURL;               
   try      
            imageURL = request.getSession().getServletContext().getResource("/resources/noimage.JPG");       
   catch(MalformedURLException me)       
            System.out.println("MalformedURL exception caught. Error was: " + me.toString());
            return null;       
   ImageIcon icon = new ImageIcon(imageURL);I think that you should be able to set the permission in the server.policy file up to allow this, but the bigger issue is should this even be done to begin with? In other words, is this really a "bad thing" to do (read the image that the servlet needs from the resources)?
If not, any pointers on what the permission should look like?
My guess is:
grant {     permission  org.apache.naming.JndiPermission  "jndi://MyServerName/MyAppName/*"; };but that is just a guess!
Thanks.

Answer 1

Wow! That's a lot of code just to get an image out of the resource, but if it works....
What I need to do with the image is place it on a button and I didn't think that going out to a servlet to read it in from a database or a flat file made sense given it was already in the resource. I think the button will take an ImageIcon so this should work for me.
Anyway, I'll give it a try on Monday and report back here.
Thanks!
The following seems to work for me;-) But I don't
know what you want to do with the ImageIcon after
that;-)
ExternalContext context =
ontext = (ExternalContext)getExternalContext();
HttpSession session = (HttpSession)
Session)
((HttpServletRequest)context.getRequest()).getSession(
InputStream is =
eam is =
session.getServletContext().getResourceAsStream("/reso
urces/marco.jpg");
ByteArrayOutputStream os = new
os = new ByteArrayOutputStream();
byte[] buf = new byte[1024];
try {
int len = 0;
while ((len = is.read(buf, 0, 1024)) > 0)
1024)) > 0) {
os.write(buf, 0, len);
} catch(IOException e) {
System.out.println("IOException caught.
tion caught. Error was: " + e.toString());
return null;
ImageIcon icon = new
on = new ImageIcon(os.toByteArray());
System.err.println("mw icon=" + icon);Thanks,
-- Marco