Apparent security problem

[Marko Simovic]

I have a jar file that works great when run from the command line. However, when downloading through webstart it throws an exception:

java.security.AccessControlException: access denied (java.lang.RuntimePermission accessClassInPackage.sun.misc)

Also, it gives me a similar error when I try to write files:

java.security.AccessControlException: access denied (java.io.FilePermission temp.txt write)

So, I then thought that it was a signing issue. I used javasigner to sign the jar but I still have the same problem. What is the correct way to do it for this particular application? Maybe I didn't do it right? Is there a step-by step somewhere?

Any ideas?

[Jared Cope]

Hi,

When you download the application through webstart, does it give you a dialog box to confirm that you want to trust the signed application from a third party?

You have to click yes to this to allow the application to be able to do file system stuff on the computer, otherwise it will run with lots of restrictions.

The signing a jar thing was mostly taken care of when I started here. We have an ant task that does it. Happy to show you that piece of the ant script if you think it will help you.

Cheers, Jared.

[K Wright]

Webstart adds extra sandbox security to the application when it is running. In order to access the file system or other IO, you need to set security permissions in the JNLP file itself.
Try adding a:

<security>
<all-permissions/>
</security>

element to your JNLP file