File Permission Error

[philip depalo]

I am getting the following error:
java.security.AccessControlException: access denied (java.io.FilePermission C:\Users\Philip DePalo\Documents\_TricksTrade\kumarphil.jpg read)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkRead(Unknown Source)
at java.io.File.isFile(Unknown Source)
at org.apache.commons.httpclient.methods.multipart.FilePartSource.<init>(FilePartSource.java:67)
at org.apache.commons.httpclient.methods.multipart.FilePart.<init>(FilePart.java:129)
at ThumbnailHandler$UploadImage.actionPerformed(ThumbnailHandler.java:363)
at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
at java.awt.Component.processMouseEvent(Unknown Source)
at javax.swing.JComponent.processMouseEvent(Unknown Source)
at java.awt.Component.processEvent(Unknown Source)
at java.awt.Container.processEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Window.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.Dialog$1.run(Unknown Source)
at java.awt.Dialog$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.awt.Dialog.show(Unknown Source)
at java.awt.Component.show(Unknown Source)
at java.awt.Component.setVisible(Unknown Source)
at java.awt.Window.setVisible(Unknown Source)
at java.awt.Dialog.setVisible(Unknown Source)
at ThumbnailHandler$UploadImage.<init>(ThumbnailHandler.java:347)
at ThumbnailHandler$1.actionPerformed(ThumbnailHandler.java:105)
at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
at javax.swing.AbstractButton.doClick(Unknown Source)
at javax.swing.AbstractButton.doClick(Unknown Source)
at SessionClient$MenuItemListener.actionPerformed(SessionClient.java:495)
at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
at javax.swing.AbstractButton.doClick(Unknown Source)
at javax.swing.plaf.basic.BasicMenuItemUI.doClick(Unknown Source)
at javax.swing.plaf.basic.BasicMenuItemUI$Handler.mouseReleased(Unknown Source)
at java.awt.Component.processMouseEvent(Unknown Source)
at javax.swing.JComponent.processMouseEvent(Unknown Source)
at java.awt.Component.processEvent(Unknown Source)
at java.awt.Container.processEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)


I have set all my policy files to allow all permissions for right now. My policy files I have found are the java.policy files in the jre and jdk directories under java, my tomcat directory, I have also set a special policy file that is loaded from the catalina properties file...I don't know what else I can do...I also don't understand why I can't read a file from my own directory.

The applet allows for a file upload and you pick one of you machine to upload...why is that a read error? I mean I know its the developer machine...but with all permissions set it should allow it...what am I missing? Any other place to check?

[Ulf Dittmer]

Welcome to JavaRanch.

Tomcat has nothing to do with this, so whatever you changed in the catalina properties/policy file has no bearing on this.

It sounds as if you have several JREs installed ("...jre and jdk directories...") - make sure that whichever one is used by the Java Plugin (you can check which one that is in the Java Plugin control panel) uses the altered policy file.

Also make sure that the policy file you're changing is being used at all - maybe by removing all permissions, and checking that all kinds of stuff now breaks.

[philip depalo]

Well when you install the JDK it installs a JRE and a seperate JRE directory as well.

So my directories are .../java/jre6
and
.../java/jdk1.6.0_16
now in the second directory there is a sub directory labeled JRE as well...

that is how it installed when you download it.

I have changed the policy file in all the directories...what would you suggest I put into the policy file to allow ALL permissions?

[Ulf Dittmer]

I see. Well, applets wouldn't use the JDK; they'd be using the JRE. But like I said, check which one actually gets used. You may have more JREs installed than you realize.

You can use an AllPermission; see http://mindprod.com/jgloss/policyfile.html for an example. But, again, make sure the policy file is actually used.

[philip depalo]

how do I make sure it is actually used...and how can i confirm which JRE is being used, the console that comes up refers to the directory I mentioned...
java.security.policy: error parsing file:/C:/Program%20Files/Java/jre6/lib/security/java.policy:
line 52: expected [;], found [permission]
so I put an error in the line so it must be reading that file...but I have already made the permission in the file as such:
grant codeBase "file:${catalina.home}/webapps/-" {
permission java.security.AllPermission;
permission org.apache.naming.JndiPermission "jndi://localhost:8080/vcei_s/*";
};

is that right? I do use jndi...i just added that line too...from a website suggestion...

[Ulf Dittmer]

Introducing a syntax error to induce an error message is a good way of finding out which JRE is used

"file:${catalina.home}/webapps/-

That's wrong - the codebase should start with "http://localhost....", not with "file:///".

The JNDI stuff only makes sense if your applet specifially does something with JNDI - by themselves, applets don't use that.

[philip depalo]

Ok I am away from my computer, so I will try that new codebase when I return. Also I am pretty sure I use JNDI because I was receiving errors reading the files until I loaded the jndi.jar file into the directory and all those errors went away. If I do use it, what should I add in reference to JNDI?

Also why does it need to refer to localhost as opposed to the directory where the files are running? I am just curious, I don't understand. Isn't localhost and the file:// directory both pointing to the same files?

[Ulf Dittmer]

If I do use it, what should I add in reference to JNDI?

Searching for that permission, I find references to Tomcat. Unless the applet uses some Apache library that also uses it, I'd say this would only be needed for whatever the web app part of your application does, but not for the applet.

Also why does it need to refer to localhost as opposed to the directory where the files are running? I am just curious, I don't understand. Isn't localhost and the file:// directory both pointing to the same files?

Yes, it's the same physical file, but it's not the same URL. And applets are loaded through http:// URLs, not through file:/// URLs. A file:/// URL would only be used if you double-clicked the HTML page containing the applet on your local machine (check the URL that's shown in the browser), but not if the applet is run off a web server.

[philip depalo]

Still haven't returned to my computer, but I will try the change. All I know is that I am running the applet from the tomcat server logging into to it using http://localhost:8080/vcei_s

A part of the applet is to upload a picture...when I click the jdom upload button the standard upload a file window appears and I navigate to some file on my computer, same computer as the tomcat server and select a file and click add, then the file permission error happens in the consol saying read error.

Do you think this is related at all to why the other images that the xml file refers to are not appearing...i mean the size of the image appears in the scroll bars and the consol says the image has been loaded, but not actual image. The program allows you to comment on an image and those comments and markings appear, but I know they are seperate from the image itself...but it would give an error if it couldn't load the image, its just the actual picture is missing...

anyhow, let me try the stuff first...and yes there is a server side applet and a client side applet...

[philip depalo]

Ok I added this instead....

grant codeBase "http://localhost:8080/-" {
permission java.security.AllPermission;
permission org.apache.naming.JndiPermission "jndi://localhost:8080/*";
};

still the same error...

[philip depalo]

Success, I was also loading a specific policy file in the java.security file so I removed the reference and now it worked just fine....so thank you for the change for the http://localhost

I still can not show the image though. I was able to upload the image and it did upload and it appears in the "list" but still no actual image displayed...i am very confused about this....in the java console it says this about the images:
Loaded image: http://localhost:8080/vcei_s/online/images\-1\0-1.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\3-CT.3007.1.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\5-area_photo.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\9-Photo_012607_003.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\10-temp054.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\11-5.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\16-Creek.jpg
Loaded image: http://localhost:8080/vcei_s/online/images\-1\17-kumarphil.jpg

So the only thing that seems odd about those lines is that the "/" turns into a "\" backslash through the url...yet it says its loading them....why is it even saying its loading them, did I have to send an out to even get that message?

[philip depalo]

I increased the trace level to 5 and here is the additional information:

Loaded image: http://localhost:8080/vcei_s/online/images\-1\0-1.jpg
network: Cache entry not found [url: http://localhost:8080/vcei_s/online/images%5C-1%5C0-1.jpg, version: null]
network: Connecting http://localhost:8080/vcei_s/online/images%5C-1%5C0-1.jpg with proxy=DIRECT
network: Connecting http://localhost:8080/ with proxy=DIRECT
network: Connecting http://localhost:8080/vcei_s/online/images%5C-1%5C0-1.jpg with cookie "JSESSIONID=B94E5BAA18845A030EE76AE9CBE21BA7"

[Ulf Dittmer]

How are you trying to load and display those images? Post a relevant code excerpt.

[philip depalo]

Wow, let me find it, its a big program that I am working on for my doctorate...I didn't build the program, but I am fixing it...so maybe so, think one of these two files is the code:

ScaleImage

 import java.io.*;
import java.awt.*;
import java.awt.event.*;
import java.awt.image.*;
import java.util.*;
import javax.swing.ImageIcon;
import java.beans.XMLEncoder;
import javax.swing.*;
import javax.swing.tree.DefaultMutableTreeNode;

public class ScaleImage {

    private Vector imageList;
    private Vector outVector;
    private ObjectOutputStream oos;
    private long newStamp;
    private DynamicTree opnTree;
    private String imageFilePath;
    public int maxImageInt= -1;
    
    String dicFile = "C:/vicdil/properties/Dicom.dic";
    //String dicURL = "http://localhost:8080/data/Dicom.dic";
    DicomDic    dicomDic;
    DicomFile   dicomFile;
    DicomData   dicomData;  
    Vector <DicomData> vecDicomData;
    
    public ScaleImage(DynamicTree tree, boolean treeFlag, String imageFilePath) {
        this.opnTree= tree;
        this.imageFilePath= imageFilePath;
	imageList = new Vector();
        
        vecDicomData= new Vector();
        
        if (treeFlag)
            trueTree();
        else 
            falseTree();
    }
    
    private void trueTree() {
        String str, strDicom;
        Vector delList= new Vector();
        int pos, imgInt;
        OpinionObject opnObj;
        Enumeration children= opnTree.rootNode.children();
        while (children.hasMoreElements()) {
            DefaultMutableTreeNode node= (DefaultMutableTreeNode)children.nextElement();
            opnObj= (OpinionObject)node.getUserObject();
            if (opnObj.isImage()) {
                str= opnObj.getFileName();
                File file=new File(imageFilePath, str);
                if (file.exists() && file.isFile()) {
                    pos= str.indexOf("-");
                    if (pos > 0) {
                        imgInt = Integer.parseInt(str.substring(0,pos));
                        if (imageList.size()<=imgInt) {
                            imageList.setSize(imgInt+1);
                        }
                        imageList.setElementAt(str, imgInt);
                        if (imgInt>maxImageInt)
                            maxImageInt= imgInt;
                        
                        strDicom= jpg2dcm(str);
                        File fileDicom= new File(imageFilePath, strDicom);
                        if (fileDicom.exists() && fileDicom.isFile()) {
                            if (vecDicomData.size()<=imgInt) {
                                vecDicomData.setSize(imgInt+1);
                            }
                            vecDicomData.setElementAt(getDicom(fileDicom, true), imgInt);
                        }
                    }
                    else {
                        file.delete();
                    }
                }
                else {  
                    delList.addElement(opnObj);
                }
                //for (int i=0; i<delList.size(); i++) {
                //    opnTree.deleteOpinion((OpinionObject)delList.elementAt(i));
                //}
            }
        }
        for (int i=0; i<delList.size(); i++) {
            opnTree.deleteOpinion((OpinionObject)delList.elementAt(i));
        }
        cleanFile(imageList);
    }
  
    private void falseTree() {
        String ext = null;
        File file= new File(imageFilePath);
        File[] fileList= file.listFiles();
        for (int i=0; i<fileList.length; i++) {
            String str= fileList[i].getName();
            int j = str.lastIndexOf('.');

            if (j > 0 &&  j < str.length() - 1) {
                ext = str.substring(j+1).toLowerCase();
                if (ext.equals("jpeg") || ext.equals("jpg") ) { 
                    int pos= str.indexOf("-");
                    if (pos <= 0) continue;
                    int imgInt = Integer.parseInt(str.substring(0,pos));
                    if (imageList.size()<=imgInt) {
                        imageList.setSize(imgInt+1);
                    }
                    imageList.setElementAt(str, imgInt);
                    //opnTree.addImageNode(str, imgInt); 
                    if (imgInt>maxImageInt)
                        maxImageInt= imgInt;        
                    
                    String strDicom= jpg2dcm(str);
                    File fileDicom= new File(imageFilePath, strDicom);
                    if (fileDicom.exists() && fileDicom.isFile()) {
                        if (vecDicomData.size()<=imgInt) {
                            vecDicomData.setSize(imgInt+1);
                        }
                        vecDicomData.setElementAt(getDicom(fileDicom, true), imgInt);
                    }
                } 
            }
        }//for
        for (int i=0; i<imageList.size(); i++) {     	        
            String str = (String)imageList.elementAt(i);
            if (str == null) continue;
            int pos= str.indexOf("-");
            if (pos <= 0) continue;
            String imgNo = str.substring(0,pos);
            int imgInt= Integer.parseInt(imgNo);
            opnTree.addImageNode(str, imgInt); 
        } 
        
        cleanFile(imageList);
    }                                           
    public void sendImage(ObjectOutputStream oos){
    	this.oos = oos;
	newStamp = System.currentTimeMillis();

    	try {
    	      //oos.writeLong(newStamp);
    	      oos.writeObject(new Long(newStamp));
    	      oos.flush();
    	      //oos.writeInt(2);
    	      oos.writeObject(new Integer(2));
    	      oos.flush();
    	      oos.writeObject(imageList);
              oos.flush();
        } catch(Exception e) { 
            e.printStackTrace(); 
        }	    
    }
                                             
    public void sendDicom(ObjectOutputStream oos){ //first send
    	this.oos = oos;
	newStamp = System.currentTimeMillis();

    	try {
    	      //oos.writeLong(newStamp);
    	      oos.writeObject(new Long(newStamp));
    	      oos.flush();
    	      //oos.writeInt(21);
    	      oos.writeObject(new Integer(21));
    	      oos.flush();
    	      oos.writeObject(vecDicomData);
              oos.flush();
        } catch(Exception e) { 
            e.printStackTrace(); 
        }	    
    }
                                                
    public void sendDicomIndividual(Vector outStrVec, DicomData dicom, int imgInt){ 
            //send dicom individually
        ObjectOutputStream ostream;
	newStamp = System.currentTimeMillis();

    	try {
            for (int i = 0; i < outStrVec.size(); i++) {
                ostream = (ObjectOutputStream) outStrVec.elementAt(i);
                //ostream.writeLong(newStamp);
                ostream.writeObject(new Long(newStamp));
                ostream.flush();
                //ostream.writeInt(91);
                ostream.writeObject(new Integer(91));
                ostream.flush();
                //ostream.writeInt(imgInt);
                ostream.writeObject(new Integer(imgInt));
                ostream.flush();
                ostream.writeObject(dicom);
                ostream.flush();
            }
        } catch(Exception e) { 
            e.printStackTrace(); 
        }	    
    }
    
    public void addImage(ObjectInputStream ois, Vector outStrVec) {
        long newStamp = System.currentTimeMillis();   
        Vector fileList1, fileList2= new Vector();
        ObjectOutputStream ostream;
        String fileName1, fileName2;

    	try {
            fileList1 = (Vector) ois.readObject();
            for (int i=0; i<fileList1.size(); i++){
                fileName1 = (String)fileList1.elementAt(i);
                File imgFile= new File(imageFilePath+File.separator+fileName1);
                if (imgFile.exists()) {
                    fileName2= String.valueOf(++maxImageInt) + "-" + fileName1;
                    imgFile.renameTo(new File(imageFilePath+ File.separator+fileName2));
                    fileList2.addElement(fileName2);
                    if (imageList.size()<=maxImageInt) {
                        imageList.setSize(maxImageInt+1);
                    }
                    imageList.setElementAt(dcm2jpg(fileName2), maxImageInt);
                    opnTree.addImageNode(dcm2jpg(fileName2), maxImageInt); 
                }
            }
            //send dicom
            for(int i=0; i<fileList2.size(); i++) {
                String fileName= (String)fileList2.elementAt(i);
                int j = fileName.lastIndexOf('.');
                int pos= fileName.indexOf("-");
                if (pos <= 0) continue;
                int imgInt = Integer.parseInt(fileName.substring(0,pos));
                
                if (j > 0 &&  j < fileName.length() - 1) {
                    String ext = fileName.substring(j+1).toLowerCase();
                    if (ext.equals("dcm")) { 
                        fileList2.setElementAt(dcm2jpg(fileName), i);
                        File fileDicom= new File(imageFilePath, fileName);
                        if (fileDicom.exists() && fileDicom.isFile()) {
                            DicomData dicomData= getDicom(fileDicom, false);
                            if (vecDicomData.size()<=imgInt) {
                                vecDicomData.setSize(imgInt+1);
                            }
                            vecDicomData.setElementAt(dicomData, imgInt);
                            
                            sendDicomIndividual(outStrVec, dicomData, imgInt);
                        }
                    }
                }
            }
           
            for (int i = 0; i < outStrVec.size(); i++) {
                ostream = (ObjectOutputStream) outStrVec.elementAt(i);
                //ostream.writeLong(newStamp);
                ostream.writeObject(new Long(newStamp));
                ostream.flush();
                //ostream.writeInt(9);
                ostream.writeObject(new Integer(9));
                ostream.flush();
                ostream.writeObject(fileList2);
                ostream.flush();
            }

    	} catch (IOException e) {
            e.printStackTrace();	
    	} catch (Exception ee) {
            ee.printStackTrace();
    	}
    }
    
    public void deleteImage(String imageFilePath, String fileName) { 
        int pos= fileName.indexOf("-");
        if (pos > 0){
            int imgInt = Integer.parseInt(fileName.substring(0,pos));
            imageList.setElementAt(null, imgInt);
            File dir= new File(imageFilePath);
            if (!dir.exists()) {
                dir.mkdirs();
            }
            File f= new File(imageFilePath, fileName);
            if (f.exists())
                f.delete();
            
            if (vecDicomData.size()> imgInt)
                vecDicomData.setElementAt(null, imgInt);
            f= new File(imageFilePath, jpg2dcm(fileName));
            if (f.exists())
                f.delete();
        }        
    }
    
    public String getFileName(int imgInt) {
        return (String)imageList.elementAt(imgInt);    
    }    
      
    public DicomData getDicom(File file, boolean flagImage) {        
        boolean isLtlEndian = true;
        boolean vrType = false;
        boolean privacy = false;
        //this.showStatus("Now Loading Dicom Dictionary....");
        dicomDic = new DicomDic(dicFile);
        dicomFile = new DicomFile(isLtlEndian, vrType, privacy, dicomDic);
        DicomData tmpdicomData = new DicomData();

        //showStatus("Now Loading Dicom File....  (" + (indexNo+1) + ")");
        tmpdicomData = dicomFile.load(file);
        if (!flagImage) {
            ImageData tmpimageData = new ImageData();
            //showStatus("Now Creating Dicom Image....  (" + (indexNo+1) + ")");
            tmpimageData.setData(tmpdicomData);
            Image image= tmpimageData.getImageWWWL2Current(0, 0);
            try {
                BufferedImage bufImage= createBufferedImage(image);
                File outputFile = new File(imageFilePath, dcm2jpg(file.getName()));
                boolean found = javax.imageio.ImageIO.write(bufImage, 
                    "jpg", outputFile);
                //if (found)
                //    System.out.println("test");
            } catch (IOException ioe) {
                System.err.println("Error reading file");
            }
        }
        
        return tmpdicomData;
    }

    public BufferedImage createBufferedImage(Image image) {
        if(image instanceof BufferedImage) {
            return (BufferedImage)image;
        }
        int w= image.getWidth(null);
        int h= image.getHeight(null);
        BufferedImage bi = new BufferedImage(image.getWidth(null), image.getHeight(null),
        BufferedImage.TYPE_INT_RGB); // ARGB to support transparency if in original image
        Graphics2D g = bi.createGraphics();
        g.drawImage(image, 0, 0, null);
        g.dispose(); // supposedly recommended for cleanup...

        return bi;
    }
    
    String jpg2dcm(String str) {
        int i = str.lastIndexOf('.');
        String ext = str.substring(i+1).toLowerCase();
        if (ext.equals("jpeg") || ext.equals("jpg") ) 
            return str.substring(0, i)+".dcm";
        else
            return str;
    }   
    String dcm2jpg(String str) {
        int i = str.lastIndexOf('.'); 
        String ext = str.substring(i+1).toLowerCase();
        if (ext.equals("dcm")) 
            return str.substring(0, i)+".jpg";
        else 
            return str;
    }
    
    void cleanFile(Vector imageList) {
        String strImage= null, strDcm= null;
        Vector dcmList= new Vector(imageList.size());
        dcmList.setSize(imageList.size());
        for (int i=0; i<imageList.size(); i++) {
            strImage= (String)imageList.elementAt(i);
            if (strImage != null) {
                dcmList.setElementAt(jpg2dcm(strImage), i);
            }
        }
        File file= new File(imageFilePath);
        File[] fileList= file.listFiles();
        for (int i=0; i<fileList.length; i++) {
            String str= fileList[i].getName();
            if (!imageList.contains(str) && !dcmList.contains(str) ) {
                fileList[i].delete();
            }
        }
    }

}
   

or

TopicManager

  import  java.io.*;
import  java.net.*;
import  java.util.*;
import javax.swing.*;

public class TopicManager {
    private String topicId;
    private ConnectManager conMan;
    private Vector inStreamVector;
    private Vector outStreamVector;
    private Vector userListVector;   
    private Vector servletSessionVector;
    
    private ObjectInputStream ois;
    private ObjectOutputStream oos;

    public ScaleImage scaleImg;    
    public DynamicTree opnTree; 
    public OpinionReqHandler orh;
    public String imageFilePath;
    public String xmlFilePath, xmlFile;
    
    private boolean flagSessionCheck= true;

    public TopicManager(String tId, ConnectManager cm) {
        this.topicId= tId;
        this.conMan= cm;
 
        this.imageFilePath= cm.imageFilePath + File.separator + tId;
        this.xmlFilePath= cm.xmlFilePath  + File.separator + tId;
        this.xmlFile= this.xmlFilePath + File.separator + "opinion.xml";
        //System.out.println("xmlFile"+this.xmlFile);
        
    	inStreamVector = new Vector();
    	outStreamVector = new Vector();
    	userListVector = new Vector();
        servletSessionVector= new Vector();
        
        initializeTree(); 
        orh= new OpinionReqHandler(imageFilePath, scaleImg, opnTree);  
        
        new ServletSessionCheck(this).start();
    }
    
    public void newStream(ObjectInputStream ois, ObjectOutputStream oos) 
            throws IOException {
        inStreamVector.addElement(ois);
        outStreamVector.addElement(oos);

        UserDataStruct uds = new UserDataStruct();
        userListVector.addElement(uds);

        ClientInteractor cir = new ClientInteractor(this, uds, ois, oos);
        cir.start();
    }
    
    public void servletNewStream(ObjectOutputStream oos, String userId, String userName) 
            throws IOException {
        //inStreamVector.addElement(null);
        outStreamVector.addElement(oos);

        UserDataStruct uds = new UserDataStruct(userId, userName);
        userListVector.addElement(uds);
        
        servletSessionVector.addElement(new ServletSession(System.currentTimeMillis(), oos, uds));
    }
    
    public void servletRequest(ObjectInputStream ois) {
        ObjectOutputStream oos= null;
        UserDataStruct uds= new UserDataStruct();
        
        try {
            String strOos= ois.readUTF();
            for (int i=0; i<outStreamVector.size(); i++) {
                if (strOos.equals(outStreamVector.get(i).toString())) {
                    oos= (ObjectOutputStream)outStreamVector.get(i);
                    break;
                }
            }
            if (oos != null) {
                ClientInteractor cir = new ClientInteractor(this, uds, ois, oos);
                cir.servletRequest();
            }
        } catch(Exception e) {}
    }

    public void initializeTree() {        
        if (opnTree != null)
            opnTree.clear();
        else
            opnTree = new DynamicTree(null, null);  
        try {
            File dir= new File(xmlFilePath);
            if (!dir.exists()) {
                dir.mkdir();
            }
            dir= new File(imageFilePath);
            if (!dir.exists()) {
                dir.mkdir();
            }
            File file=new File(xmlFile);//Create a new .xml file
            if (file.exists()) {
                opnTree.clear();
                JTreeOutputter jtree= new JTreeOutputter(opnTree, xmlFile); 
                scaleImg= new ScaleImage(opnTree, true, imageFilePath);
            }
            else {                
                scaleImg= new ScaleImage(opnTree, false, imageFilePath);
            }
        }
        catch(Exception e) {
            System.out.println("Exception"+e);
        }
    }    

    public Vector getInStreamVector() { return inStreamVector; }
    public Vector getOutStreamVector() { return outStreamVector; }
    public Vector getUserListVector() { return userListVector; }
    public Vector getServletSessionVector() { return servletSessionVector;}

    public void removeTopic() {
        flagSessionCheck= false;
        conMan.removeTopic(topicId);
    }
    
    class ServletSessionCheck extends Thread {
        TopicManager tm;
        public ServletSessionCheck(TopicManager tm) {
            this.tm= tm;
        }
        public void run() {            
            ServletSession serv;
            Vector vec= new Vector();
            while (flagSessionCheck) {
                try {
                    Thread.sleep(60*1000);
                    vec.clear();
                    long current= System.currentTimeMillis();
                    synchronized (servletSessionVector) {
                        for (int i=0; i<servletSessionVector.size(); i++){
                            serv= (ServletSession)servletSessionVector.get(i);
                            if ((current - serv.time) > 2*60*1000) {
                                vec.addElement(serv);
                            }
                        }
                        for (int i=0; i<vec.size(); i++) {
                            serv= (ServletSession)vec.get(i);
                            servletSessionVector.remove(serv);
                            ParticipantManager pm= new ParticipantManager(serv.uds,tm);
                            pm.exitParticipant((ObjectOutputStream)serv.oos);
                        }
                    } //synchronized
                } catch (Exception e) {
               	 	System.out.println("ServletSessionCheck Error : " + e.toString()); 
               	 	e.printStackTrace();
               } // end try
            } // end while
        } // end run
    }
}

  

or

DynamicTree

  /*
 * This code is based on an example provided by Richard Stanford, 
 * a tutorial reader.
 */

import java.awt.GridLayout;
import java.awt.Toolkit;
import javax.swing.JPanel;
import javax.swing.JScrollPane;
import javax.swing.JTree;
import javax.swing.tree.DefaultMutableTreeNode;
import javax.swing.tree.DefaultTreeModel;
import javax.swing.tree.MutableTreeNode;
import javax.swing.tree.TreePath;
import javax.swing.tree.TreeSelectionModel;
import javax.swing.event.TreeModelEvent;
import javax.swing.event.TreeModelListener;

import javax.swing.event.TreeSelectionEvent;
import javax.swing.event.TreeSelectionListener;

import javax.swing.tree.DefaultTreeCellRenderer;
import java.awt.Component;
import java.util.*;
import javax.swing.*;
import java.awt.*;
import java.io.*;

public class DynamicTree extends JPanel
                            implements TreeSelectionListener, Serializable {
    protected DefaultMutableTreeNode rootNode;
    protected DefaultTreeModel treeModel;
    protected JTree tree;
//    private Toolkit toolkit = Toolkit.getDefaultToolkit();
    private JEditorPane opinionText;
    private JTabbedPane tabPane;

    public DynamicTree(JEditorPane textArea, JTabbedPane tabPane) {
        super(new GridLayout(1,0));
        this.opinionText= textArea;
        this.tabPane= tabPane;
        
        OpinionObject opnObj= new OpinionObject("root", null, -1);
        rootNode = new DefaultMutableTreeNode(opnObj);
        treeModel = new DefaultTreeModel(rootNode);
        treeModel.addTreeModelListener(new MyTreeModelListener());

        tree = new JTree(treeModel);
        tree.setEditable(false);
        tree.getSelectionModel().setSelectionMode
                (TreeSelectionModel.SINGLE_TREE_SELECTION);
        tree.setShowsRootHandles(true);
//        tree.setCellRenderer(new MyRenderer());
        DefaultTreeCellRenderer renderer = new DefaultTreeCellRenderer();
        renderer.setLeafIcon(null);
        tree.setCellRenderer(renderer);
//        tree.setRootVisible(false);
        tree.addTreeSelectionListener(this);

        JScrollPane scrollPane = new JScrollPane(tree);
        add(scrollPane);
    }

    public void valueChanged(TreeSelectionEvent e) {
        DefaultMutableTreeNode node = (DefaultMutableTreeNode)
                   tree.getLastSelectedPathComponent();
        if (node == null) return;
        OpinionObject nodeInfo = (OpinionObject)node.getUserObject();
        if (opinionText != null) {  // null for sever Tree
            opinionText.setText(nodeInfo.treeText());
            
            if (nodeInfo.getImageNo() >= 0) {
                int tarIdx = tabPane.indexOfTab(String.valueOf(nodeInfo.getImageNo()));
                if  (tarIdx == -1)  {
                        System.out.println("Target image not found.");
                        //JOptionPane.showMessageDialog(mainFrame,"Target image not found.");
                        return;
                }
                // scroll bar move, 2005. 11. 15
                int x= nodeInfo.getPosX();
                int y= nodeInfo.getPosY();
                tabPane.setSelectedIndex(tarIdx);
                JScrollPane jscPane= (JScrollPane)tabPane.getSelectedComponent();
                JScrollBar jscHBar= jscPane.getHorizontalScrollBar();
                JScrollBar jscVBar= jscPane.getVerticalScrollBar();
                Dimension dim= tabPane.getSize();
                jscHBar.setValue(x-(dim.width/2));
                jscVBar.setValue(y-(dim.height/2));
                tabPane.validate();
            }
        }
    }
    
    private class MyRenderer extends DefaultTreeCellRenderer {
        public Component getTreeCellRendererComponent(
                            JTree tree,
                            Object value,
                            boolean sel,
                            boolean expanded,
                            boolean leaf,
                            int row,
                            boolean hasFocus) {

            super.getTreeCellRendererComponent(
                            tree, value, sel,
                            expanded, leaf, row,
                            hasFocus);
            setIcon(null);
            return this;
        }
    }
    
    /** Remove all nodes except the root node. */
    public void clear() {
        rootNode.removeAllChildren();
        treeModel.reload();
    }

    /** Remove the currently selected node. */
    public void removeCurrentNode() {
        TreePath currentSelection = tree.getSelectionPath();
        if (currentSelection != null) {
            DefaultMutableTreeNode currentNode = (DefaultMutableTreeNode)
                         (currentSelection.getLastPathComponent());
            MutableTreeNode parent = (MutableTreeNode)(currentNode.getParent());
            if (parent != null) {
                treeModel.removeNodeFromParent(currentNode);
                return;
            }
        } 

        // Either there was no selection, or the root was selected.
//        toolkit.beep();
    }

    /** Add child to the currently selected node. */
    public DefaultMutableTreeNode addObject(Object child) {
        DefaultMutableTreeNode parentNode = null;
        TreePath parentPath = tree.getSelectionPath();

        if (parentPath == null) {
            parentNode = rootNode;
        } else {
            parentNode = (DefaultMutableTreeNode)
                         (parentPath.getLastPathComponent());
        }

        return addObject(parentNode, child, true);
    }

    public DefaultMutableTreeNode addObject(DefaultMutableTreeNode parent,
                                            Object child) {
        return addObject(parent, child, false);
    }

    public DefaultMutableTreeNode addObject(DefaultMutableTreeNode parent,
                                            Object child, 
                                            boolean shouldBeVisible) {
        DefaultMutableTreeNode childNode = 
                new DefaultMutableTreeNode(child);

        if (parent == null) {
            parent = rootNode;
        }

        treeModel.insertNodeInto(childNode, parent, 
                                 parent.getChildCount());

        //Make sure the user can see the lovely new node.
        if (shouldBeVisible) {
            TreePath selectedPath= new TreePath(childNode.getPath());
            tree.scrollPathToVisible(selectedPath);
            tree.setSelectionPath(selectedPath);
        }
        return childNode;
    }

    class MyTreeModelListener implements TreeModelListener {
        public void treeNodesChanged(TreeModelEvent e) {
            DefaultMutableTreeNode node;
            node = (DefaultMutableTreeNode)
                     (e.getTreePath().getLastPathComponent());

            /*
             * If the event lists children, then the changed
             * node is the child of the node we've already
             * gotten.  Otherwise, the changed node and the
             * specified node are the same.
             */
            try {
                int index = e.getChildIndices()[0];
                node = (DefaultMutableTreeNode)
                       (node.getChildAt(index));
            } catch (NullPointerException exc) {}

            System.out.println("The user has finished editing the node.");
            System.out.println("New value: " + node.getUserObject());
        }
        public void treeNodesInserted(TreeModelEvent e) {
        }
        public void treeNodesRemoved(TreeModelEvent e) {
        }
        public void treeStructureChanged(TreeModelEvent e) {
        }
    }
    
    public void addImageNode(String fileName, int imgNo){
        OpinionObject opnObj = new OpinionObject("image", fileName, imgNo); 
        addObject(rootNode, opnObj,true);
    }
    
    public void addOpinionComment(OpinionObject opnObj) {
        DefaultMutableTreeNode parent= null;
        int parentSeqNo= opnObj.getParentSeqNo();

        Enumeration bfs= rootNode.breadthFirstEnumeration();
        while (bfs.hasMoreElements()) {
            DefaultMutableTreeNode node= (DefaultMutableTreeNode)bfs.nextElement();
            OpinionObject opn= (OpinionObject)node.getUserObject();
            if (opn.getSeqNo() == parentSeqNo) {
                parent= node;
                break;
            }
        }
        if (parent != null) {
            addObject(parent, opnObj, true);
        }
        else{
            if (opinionText != null) {  // null for sever Tree
                JOptionPane.showMessageDialog((Frame)SessionClient.mainFrame,"Parent node not found.");
            }
            return;            
        }
    }

    public void deleteOpinion(OpinionObject opnObj) {
                DefaultMutableTreeNode current= null, node;
        int currentSeqNo= opnObj.getSeqNo();

        Enumeration bfs= rootNode.breadthFirstEnumeration();
        while (bfs.hasMoreElements()) {
            node= (DefaultMutableTreeNode)bfs.nextElement();
            OpinionObject opn= (OpinionObject)node.getUserObject();
            if (opn.getSeqNo() == currentSeqNo) {
                current= node;
                break;
            }
        }
        if (current != null) {
            DefaultMutableTreeNode parent = (DefaultMutableTreeNode)(current.getParent());
            if (parent != null) {
                treeModel.removeNodeFromParent(current);
                TreePath selectedPath= new TreePath(parent.getPath());
                tree.scrollPathToVisible(selectedPath);
                tree.setSelectionPath(selectedPath);
            }
            else {
                if (opinionText != null) {  // null for sever Tree
                    JOptionPane.showMessageDialog((Frame)SessionClient.mainFrame,"RootNode Cannot Be Deleted!");
                }
            }
        }
        else{
            if (opinionText != null) {  // null for sever Tree
                JOptionPane.showMessageDialog((Frame)SessionClient.mainFrame,"Delete node not found.");
            }
        }
    }
        
    public DefaultMutableTreeNode getImageNode(int imgNo) {
        DefaultMutableTreeNode imgNode= null;
        Enumeration children= rootNode.children();
        while (children.hasMoreElements()) {
            DefaultMutableTreeNode node= (DefaultMutableTreeNode)children.nextElement();
            if ( ((OpinionObject)node.getUserObject()).getImageNo() == imgNo) {
                imgNode= node;
                break;
            }
        }
        return imgNode;
    }
    
    public DefaultMutableTreeNode getParentImageNode(int parentSeqNo) {
        DefaultMutableTreeNode parent= null;
        Enumeration children= rootNode.children();
        while (children.hasMoreElements()) {
            DefaultMutableTreeNode node= (DefaultMutableTreeNode)children.nextElement();
            if ( ((OpinionObject)node.getUserObject()).getSeqNo() == parentSeqNo) {
                parent= node;
                break;
            }
        }
        return parent;
    }
    
    public DefaultMutableTreeNode getSelectedNode() {
        DefaultMutableTreeNode selectedNode = null;
        TreePath selectedPath = tree.getSelectionPath();

        if (selectedPath == null) {
            selectedNode = rootNode;
        } else {
            selectedNode = (DefaultMutableTreeNode)
                         (selectedPath.getLastPathComponent());
        }
        return selectedNode;
    }
    
    public void setDisplayObjects(Vector[] data, int col, int imgNo, int[] pntSeqArray) {
        int i, idx=0, childPntSeq, childPntType;
        DefaultMutableTreeNode imageNode= getParentImageNode(imgNo); 
        if (imageNode != null) {
            Enumeration children= imageNode.children(); 
            while (children.hasMoreElements()) {
                DefaultMutableTreeNode node= (DefaultMutableTreeNode)children.nextElement();
                OpinionObject opnObj= (OpinionObject)node.getUserObject();
                childPntSeq= opnObj.getPntSeq();
                childPntType= opnObj.getPointerType();
                if (childPntType > 0) {
                    for (i=0; i<pntSeqArray.length; i++) {
                        if (childPntSeq == pntSeqArray[i]) {
                            data[idx]= new Vector(col);
                            data[idx].addElement(opnObj.getUserName());
                            data[idx].addElement(new Integer(opnObj.getPntSeq())); 
                            data[idx++].addElement(opnObj.getOpnDetail());
                        }
                    }
                }
            }
        
        }
    }
    
    public void sendObject(ObjectOutputStream oos) { //from server
        Vector vec= new Vector();
        DefaultMutableTreeNode node;
        OpinionObject opn;
        Enumeration bfs= rootNode.breadthFirstEnumeration();
        while (bfs.hasMoreElements()) {
            node= (DefaultMutableTreeNode)bfs.nextElement();
            opn= (OpinionObject)node.getUserObject();
            if (!opn.isRoot()) {
                vec.addElement(opn);
            }
        }   
        
	long newStamp = System.currentTimeMillis();
    	try {
    	      //oos.writeLong(newStamp);
    	      oos.writeObject(new Long(newStamp));
    	      oos.flush();
    	      //oos.writeInt(3);
    	      oos.writeObject(new Integer(3));
    	      oos.flush();
    	      oos.writeObject(vec);
              oos.flush();
        } catch(Exception e) { 
            e.printStackTrace(); 
        }	    
    }
}
  

or

ServerSession ThumbnailHandler

 import java.io.*;
import java.awt.*;
import java.awt.event.*;
import java.awt.image.*;
import java.util.Vector;
import javax.swing.*;
import java.net.URL; 
import javax.swing.tree.DefaultMutableTreeNode;
import javax.swing.event.*;


import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpStatus;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.methods.multipart.FilePart;
import org.apache.commons.httpclient.methods.multipart.MultipartRequestEntity;
import org.apache.commons.httpclient.methods.multipart.Part;
import org.apache.commons.httpclient.params.HttpMethodParams;

public class ThumbnailHandler implements ChangeListener {

    private ObjectInputStream ois;
    private ObjectOutputStream oos;
    private int SCALE_WIDTH = 30;
    private int SCALE_HEIGHT = 30;
    private BufferedImage bi =null;
    //private Vector btnThumbVec; //private JButton thumbButtons[];
    private Vector panelVec;    //private JPanel panelArr[]; 
    //private Vector lblThumbVec; //private JLabel thumbLbl[];
    private JPanel thumbPanel;
    private JScrollPane scrollThumbPanel;
    private JTabbedPane tabPane;
    private JPanel jpanel;
    private JApplet mainApplet;
    private Vector imgList;
    //private Vector imgVector;
    private JButton addBtn;
    private JButton delBtn;
    private JButton fitTabBtn;
    private JButton delPntButton;
    private Vector <TabLayer> vecTabLayer;
    private JDialog uploadDialog;
    private Container contentPane;
    private Component thisFrame;
    private String userId;
    private String userName;
    private String topicId;
    
    private OpinionTreeHandler oth;
    private Frame mainFrame= (Frame)SessionClient.mainFrame;
                
    String imageURL, uploadServer, uploadPath;
    
    Vector <DicomData> vecDicomData;
    
    public ThumbnailHandler(JApplet mainApplet,
                            Container contentPane,Component frame,
                            JPanel jpanel, JTabbedPane tabPane,
    			    ObjectInputStream ois,
    			    ObjectOutputStream oos,
                            JButton addBtn,
                            JButton delBtn,
                            JButton fitTabBtn,
                            JButton delPntButton,
                            Vector vecTabLayer,
                            String userId,
                            String userName,
                            String tId,
                            String vceiServer, 
                            String vceiServerImageBase,
                            String vceiUploadServer, 
                            String vceiUploadPath) { 
        this.contentPane = contentPane;
   	this.jpanel = jpanel;
    	this.ois = ois;
    	this.oos = oos;
    	this.mainApplet = mainApplet;
    	this.tabPane = tabPane;
    	this.addBtn = addBtn;
    	this.delBtn = delBtn;
    	this.fitTabBtn = fitTabBtn;
    	this.delPntButton = delPntButton;
        this.vecTabLayer=vecTabLayer;
    	this.thisFrame = frame;
    	this.userId = userId;
    	this.userName = userName;
        this.topicId = tId;
        this.imageURL= vceiServerImageBase+File.separator+tId; 
        this.uploadServer= vceiUploadServer;
        this.uploadPath= vceiUploadPath+"/"+topicId;

    	//imgVector = new Vector();
        //panelVec = new Vector();	
        thumbPanel = new JPanel();
	    
        thumbPanel.setPreferredSize(new Dimension(3*SCALE_WIDTH,700)); 
        thumbPanel.setLayout( new FlowLayout(FlowLayout.LEFT,5,5));
        scrollThumbPanel= new JScrollPane(thumbPanel, 
                                          JScrollPane.VERTICAL_SCROLLBAR_ALWAYS, 
                                          JScrollPane.HORIZONTAL_SCROLLBAR_NEVER);
        scrollThumbPanel.setPreferredSize(new Dimension(3*SCALE_WIDTH+15,535));

        addBtn.addActionListener(new ActionListener() {    // input text
            public void actionPerformed(ActionEvent e) {
            	UploadImage ui = new UploadImage();
            }
        });
        delBtn.addActionListener(new ActionListener() {    // input text
            public void actionPerformed(ActionEvent e) {
            	DeleteImage di = new DeleteImage();
            }
        });
        fitTabBtn.addActionListener(new ActionListener() {    // input text
            public void actionPerformed(ActionEvent e) {
            	FitTab ft = new FitTab();
            }
        });
        
        tabPane.addChangeListener(this); 
    }
    
    public void stateChanged(ChangeEvent e) {
        if (e.getSource() == tabPane) {
            //SessionClient.tagInfoFrame.setImageNo(tabPane.getSelectedIndex());
            int i= tabPane.getSelectedIndex();
            if (i < 0) return;
            String str= tabPane.getTitleAt(i);
            SessionClient.tagInfoFrame.setImageNo(str);
        }
    }


    public void receiveDicoms(boolean first) {
        try {
            if (first) {
                vecDicomData= (Vector)ois.readObject();
                SessionClient.tagInfoFrame.setTagInfoFrame(vecDicomData);
            } else {
                //int imgInt = ois.readInt();
                int imgInt = ((Integer)ois.readObject()).intValue();
                if (vecDicomData.size()<=imgInt) {
                    vecDicomData.setSize(imgInt+1);
                }
                vecDicomData.setElementAt((DicomData)ois.readObject(), imgInt);
                SessionClient.tagInfoFrame.makeImageNo(Integer.toString(imgInt));
            }
        } catch (Exception e) { 
	        JOptionPane.showMessageDialog(mainFrame, e.toString());
	 }        
    }
    public void receiveImages(boolean upload) {	
    	try {
            String fileName, imgNo;
            int imgInt;
            Image orgImage;
            
     	    imgList = (Vector) ois.readObject();
                
    	    for( int i = 0; i < imgList.size(); i++ ) { 
                fileName = (String)imgList.elementAt(i);
                if (fileName == null) continue;
                int pos= fileName.indexOf("-");
                if (pos <= 0) continue;
    	    	imgNo = fileName.substring(0,pos);
                imgInt= Integer.parseInt(imgNo);
    		
    		orgImage = mainApplet.getImage(new URL(imageURL+File.separator+fileName));
    		//imgVector.addElement(orgImage); 
 
                TabLayer tabLayer= new TabLayer(tabPane, imgInt, orgImage);
                vecTabLayer.addElement(tabLayer);
    
                JScrollPane jscPane= addTabPane(tabLayer);
                //fitTabBtn.doClick();
                //fitTabBtn.doClick();

                addThumbnail(orgImage, imgInt, jscPane);
                if (upload){
                    oth.addImageNode(fileName, imgInt); 
                }
	    }
	    jpanel.add(scrollThumbPanel);		

         } catch (Exception e) { 
	        JOptionPane.showMessageDialog(mainFrame, e.toString());
	 }
 
	 jpanel.validate();
	 jpanel.repaint();
    }	
    
    private void addThumbnail(Image orgImage, int imgInt, JScrollPane jscPane) {
        JScrollPane jsc= jscPane;
        Image aftImage;
        final String imgNo= String.valueOf(imgInt);
        
        aftImage = orgImage.getScaledInstance(SCALE_WIDTH, SCALE_HEIGHT, 
                                              Image.SCALE_FAST);
        JButton btnTmp= new JButton(new ImageIcon(aftImage));
        btnTmp.setMargin(new Insets(0,0,0,0));
        JLabel lblTmp= new JLabel("     " + imgNo);
        JPanel panelTmp= new JPanel();
        LayoutManager layout = new BoxLayout(panelTmp,BoxLayout.Y_AXIS);
        panelTmp.setLayout(layout);
        panelTmp.add(btnTmp);
        panelTmp.add(lblTmp);
        //panelVec.addElement(panelTmp);

        thumbPanel.add(panelTmp);
/*        
        btnTmp.addActionListener(new ActionListener() {    // input text
            public void actionPerformed(ActionEvent e) {
                tabPane.setSelectedComponent(jsc); 
            }
        });
 */
        btnTmp.addMouseListener(
	    new MouseAdapter ()	{
		public void mouseClicked ( MouseEvent e ) {  
                    int idx = tabPane.indexOfTab(imgNo);
                    if (idx >= 0) { 
                        tabPane.setSelectedIndex(idx); 
                    }
                }
	    }
	);
    }
    private JScrollPane subAddTabPane(String imageNo, JLayeredPane layer) {          
        JScrollPane jscr= new JScrollPane(layer);
        tabPane.addTab(imageNo,jscr);
        tabPane.validate();
        tabPane.repaint();
        return jscr;
    }
    private JScrollPane addTabPane(TabLayer tabLayer) {
        JLayeredPane fitLayer, orgLayer;
        JScrollPane jscr;
        String imageNo;
  
        fitLayer= tabLayer.getFitLayer();
        orgLayer= tabLayer.getOrgLayer();    
        imageNo= String.valueOf(tabLayer.getImageNo());

        tabPane.setVisible(false);
        if (fitTabBtn.getText().equals("Original")) {  
            subAddTabPane(imageNo, orgLayer);    
            int cnt= tabPane.getTabCount()-1;
            jscr= subAddTabPane(imageNo, fitLayer);   
            tabPane.remove(cnt); 
        }
        else { 
            subAddTabPane(imageNo, fitLayer);    
            int cnt= tabPane.getTabCount()-1;
            jscr= subAddTabPane(imageNo, orgLayer);    
            tabPane.remove(cnt);
        }
        tabPane.setVisible(true);
        return jscr;
    }

    class UploadImage implements ActionListener {
        private DefaultListModel fileListModel; 
        private JList fileList;
        private JButton okBtn = new JButton("UPDATE");
        private JButton cancelBtn = new JButton("CANCEL");
        private JFileChooser fc;
        private JButton addFileBtn = new JButton(" Add ");
        private JButton delFileBtn = new JButton("Delete");
        //private String uploadServer = //"http://vicdil.towson.edu:9005/vcei/servlet/VceiUploadServer";
                                    //= "http://localhost:8080/vcei/servlet/UploadServer";
        
    	public UploadImage() {
            Frame frame = (Frame)thisFrame;
            JDialog.setDefaultLookAndFeelDecorated(true); 
            uploadDialog = new JDialog(frame,"Upload Image", true);
            Container dialogContentPane = uploadDialog.getContentPane();


            fc = new JFileChooser();;
            fc.setMultiSelectionEnabled(true);
            fc.setDragEnabled(true);
            fc.setControlButtonsAreShown(false);     
            fc.addChoosableFileFilter(new ImageFilter());
            fc.setAcceptAllFileFilterUsed(false);
            //fc.setPreferredSize(new Dimension(450, 220));

            JPanel fcPanel = new JPanel(new BorderLayout());
            fcPanel.add(fc, BorderLayout.CENTER);   
            
            JPanel centerPane= new JPanel();
            JPanel bottomPane = new JPanel();

            JPanel filePane= new JPanel();

            fileListModel = new DefaultListModel();

            dialogContentPane.add(filePane, BorderLayout.NORTH);
            dialogContentPane.add(bottomPane, BorderLayout.SOUTH);

            JLabel labelFileTitle = new JLabel("Upload Image Files");  
            JPanel upFilePane = new JPanel();
            JPanel leftFilePane = new JPanel();
            JPanel botCenterFilePane = new JPanel(new FlowLayout(FlowLayout.CENTER,50, 10));
            JPanel botBottomFilePane = new JPanel();        

            fileList = new JList(fileListModel);

            addFileBtn.setMargin(new Insets(0,5,0,5));
            delFileBtn.setMargin(new Insets(0,5,0,5));

            fileList.setBorder(BorderFactory.createLoweredBevelBorder());
            JScrollPane fileListScrollPane = new JScrollPane(fileList);
            fileListScrollPane.setPreferredSize(new Dimension(470,130));

            upFilePane.setLayout(new FlowLayout(FlowLayout.LEFT));
            upFilePane.add(labelFileTitle);
            leftFilePane.add(fc);       

            botCenterFilePane.add(addFileBtn);
            botCenterFilePane.add(delFileBtn);

            botBottomFilePane.setLayout(new FlowLayout(FlowLayout.CENTER));
            botBottomFilePane.add(fileListScrollPane);

            filePane.setLayout(new BorderLayout());
            JPanel bottomFilePane= new JPanel(new BorderLayout());
                bottomFilePane.add(leftFilePane,BorderLayout.NORTH);
                bottomFilePane.add(botBottomFilePane,BorderLayout.SOUTH);
                bottomFilePane.add(botCenterFilePane,BorderLayout.CENTER);
            filePane.add(bottomFilePane);        

            okBtn.setMargin(new Insets(0,5,0,5));
            cancelBtn.setMargin(new Insets(0,0,0,0));
            bottomPane.add(okBtn);
            bottomPane.add(cancelBtn);

            bottomPane.setLayout(new FlowLayout(FlowLayout.CENTER,80, 20));

            okBtn.addActionListener(this);
            cancelBtn.addActionListener(this);
            addFileBtn.addActionListener(this);    	    
            delFileBtn.addActionListener(this);
  	    
    	   // uploadDialog.setSize(new Dimension(250,300));
            uploadDialog.pack();
	    uploadDialog.setLocationRelativeTo(frame);
	    uploadDialog.setVisible(true);

    	}

	public void actionPerformed(ActionEvent e) {	
            try{
                Object source = e.getSource();

                if (source == okBtn) {
                    PostMethod filePost = new PostMethod(uploadServer);
                    int listSize= fileListModel.size();
                    if (listSize <= 0) return;
                    try {
                        Part[] parts= new Part[listSize];
                        for (int i=0; i<listSize; i++) {
                            File targetFile= new File((String)fileListModel.get(i));
                            parts[i]= new FilePart(targetFile.getName(), targetFile);
                        }
                        String strQuery= "tId=" + topicId
                                        + "&uploadPath=" + uploadPath;
                        String queryString= strQuery.replace(' ', '+');
                        filePost. setQueryString(queryString);

                        filePost.setRequestEntity(new MultipartRequestEntity(parts, filePost.getParams()));
                        HttpClient client = new HttpClient();
                        client.getHttpConnectionManager().getParams().setConnectionTimeout(5000);
                        int status = client.executeMethod(filePost);
                        if (status == HttpStatus.SC_OK) {
                            String strImage[];
                            Vector fileList= new Vector();
                            String str= filePost.getResponseBodyAsString();
                            strImage= str.split(";");
                            for (int i=0; i<strImage.length; i++){
                                fileList.addElement(strImage[i]);
                            }
                            addImages(fileList);
                            JOptionPane.showMessageDialog(mainFrame, "Upload Images Successfully!"
                                    +System.getProperty("line.separator")
                                    +str);
                        } else {
                            JOptionPane.showMessageDialog(mainFrame, "Upload Images Fail!");
                        }
                    } catch (Exception ex) {
                        ex.printStackTrace();
                    } finally {
                        filePost.releaseConnection();
                    }
                    uploadDialog.dispose();
                 }
                 else if (source == cancelBtn)  {
                    uploadDialog.dispose();
                 }
                 else if (source == addFileBtn) {
                     File[] selFiles;
                     String pathStr, nameStr;
                     selFiles= fc.getSelectedFiles();
                     for (int i=0; i<selFiles.length; i++) {
                         if (selFiles[i].isFile()) {
                             pathStr= selFiles[i].toString();
                             nameStr= selFiles[i].getName();
                            if (!fileListModel.contains(pathStr)) {
                                fileListModel.addElement(pathStr);
                            }
                         }
                     }
                     fc.setSelectedFiles(null);
                 }
                 else if (source == delFileBtn) {
                     int[] selectedIndices= fileList.getSelectedIndices();
                     for (int i=selectedIndices.length-1; i>=0; i--) {
                         fileListModel.removeElementAt(selectedIndices[i]);
                     }
                 }   
               } catch (Exception aa) { 
                    System.out.println(aa);
               }
	}
    }
                
    class DeleteImage{    
    	public DeleteImage() {   
            int tabIdx = tabPane.getSelectedIndex();
            int imgInt= Integer.parseInt(tabPane.getTitleAt(tabIdx));
            DefaultMutableTreeNode imgNode= oth.getImageNode(imgInt); 
            OpinionObject opnObj= (OpinionObject)imgNode.getUserObject();
            long timeStamp = System.currentTimeMillis();
            int opt= JOptionPane.showConfirmDialog(mainFrame, 
                            "Sure To Delete The Selected Image And Its Node?", 
                            "Delete Image",
                            JOptionPane.YES_NO_OPTION);
            if (opt == 0) {
                try {
                    ServletConnection serv= null;
                    if (SessionClient.flagServlet) {
                        serv= new ServletConnection(SessionClient.requestPath);
                        oos= serv.openRequest(SessionClient.topicId, SessionClient.strOos);
                    }
                    
                    //oos.writeLong(timeStamp);
                    oos.writeObject(new Long(timeStamp));
                    oos.flush();
                    //oos.writeInt(10); // send request
                    oos.writeObject(new Integer(10)); // send request
                    oos.flush();
                    //oos.writeUTF(userId);
                    oos.writeObject(new String(userId));
                    oos.flush();
                    //oos.writeUTF(userName);
                    oos.writeObject(new String(userName));
                    oos.flush();
                    oos.writeObject(opnObj);
                    oos.flush();
           
                    if (SessionClient.flagServlet) {
                        serv.closeRequest();
                    }
                } catch (IOException ioe) {
                    JOptionPane.showMessageDialog(mainFrame, ioe.getMessage());
                } 
            }
        }
    }
                                  
    class FitTab{    
    	public FitTab() {   
            int idx= tabPane.getSelectedIndex();
            TabLayer tabLayer= null;

            tabPane.removeAll();
            if (fitTabBtn.getText().equals("Fit Tab")) {
                for (int i=0; i<vecTabLayer.size(); i++) {
                    tabLayer= (TabLayer)vecTabLayer.elementAt(i);
                    JScrollPane jscr = new JScrollPane(tabLayer.getFitLayer());
                    tabPane.addTab(String.valueOf(tabLayer.getImageNo()),jscr);
                }
                fitTabBtn.setText("Original");
            }
            else {
                for (int i=0; i<vecTabLayer.size(); i++) {
                    tabLayer= (TabLayer)vecTabLayer.elementAt(i);
                    JScrollPane jscr = new JScrollPane(tabLayer.getOrgLayer());
                    tabPane.addTab(String.valueOf(tabLayer.getImageNo()),jscr);                    
                }
                fitTabBtn.setText("Fit Tab");
            }            
            tabPane.setSelectedIndex(idx);
            tabPane.validate();
            tabPane.repaint();            
            delPntButton.doClick();
             
        }
    }
                       
    public void addImages(Vector fileList) {
        long timeStamp = System.currentTimeMillis();
        try {
            ServletConnection serv= null;
            if (SessionClient.flagServlet) {
                serv= new ServletConnection(SessionClient.requestPath);
                oos= serv.openRequest(SessionClient.topicId, SessionClient.strOos);
            }
            
            //oos.writeLong(timeStamp);
            oos.writeObject(new Long(timeStamp));
            oos.flush();
            //oos.writeInt(9);                         // send request
            oos.writeObject(new Integer(9));                         // send request                     
            oos.flush();
            //oos.writeUTF(userId);
            oos.writeObject(new String(userId));
            oos.flush();
            //oos.writeUTF(userName);
            oos.writeObject(new String(userName));
            oos.flush();
            oos.writeObject(fileList);
            oos.flush();
           
            if (SessionClient.flagServlet) {
                serv.closeRequest();
            }
        } catch (IOException ioe) {
            JOptionPane.showMessageDialog(mainFrame, ioe.getMessage());
        }
                
    }
    
    public void deleteImage(int imgInt) {
        String imgNo= String.valueOf(imgInt);
        int idx = tabPane.indexOfTab(imgNo);        
        tabPane.remove(idx);
        thumbPanel.remove(idx); 
        vecTabLayer.remove(idx);
        vecDicomData.setElementAt(null, imgInt);
        SessionClient.tagInfoFrame.removeImageNo(imgNo);
	 jpanel.validate();
	 jpanel.repaint();
    }
    
    public void setOpinionTreeHandler(OpinionTreeHandler handler) {
        this.oth= handler;
    }
    
}
   

[philip depalo]

what does it mean when it says cache entry not found?

[Ulf Dittmer]

That's way too much code to try to understand. But I notice that the code uses AppletContext.getImage. From its javadocs: "This method always returns immediately, whether or not the image exists." YOu may have to use an ImageObserver that tells you when the image is actually available. That's just a guess, though, I haven't looked at the code in detail.

what does it mean when it says cache entry not found?

Applets and their resources (jar files, image files etc.) are cached by the Java Plugin. This message just means that the image wasn't cached (most likely because it hasn't been used before), and the applet will now attempt to download it from the server.

[philip depalo]

So I discovered the issue with displaying the images

//this.imageURL= vceiServerImageBase+File.separator+tId;
this.imageURL= vceiServerImageBase+"/"+topicId;

So I commented out the line that used File.separator to create the \ in between the directories and physically entered a "/" to denote the directories. This was all that was necessary. It seems that when the URL encodes the actual address it changes the File.separator \ to %5C which is the url code, but not when its supposed to show a directory. This also happened in one other place:

//orgImage = mainApplet.getImage(new URL(imageURL+File.separator+fileName));
orgImage = mainApplet.getImage(new URL(imageURL+"/"+fileName));

So that was the answer...

[Jeroen De Schutter]

Hi there,

I'm bumping this topic because I encountered exactly the same security issue as described in the first post of this topic. I am also developping an applet which enables to upload image files from a local machine to a Struts application.

I don't quite understand why I should change the permissions in the policy files. When I am going to deploy this applet to our users, do they have to change their policy files on their local machines too ? Is there no other solution ?

[Paul Clapham]

Jeroen De Schutter wrote:I don't quite understand why I should change the permissions in the policy files. When I am going to deploy this applet to our users, do they have to change their policy files on their local machines too ? Is there no other solution ?

Well, you shouldn't. Expecting all of the users to change their policy files would be absurd, as you say. The discussion about policy files in this thread appears to me to be about some policy file on the Tomcat server. No, you just have to sign the applet if it needs to access the file system on the users' machines.

[Jeroen De Schutter]

Well, id did sign the applet. I was able to write a (temporary) file to the disk of the client machine but when I tried to upload the file using Apache HttpClient, i did get an AccessControlException.

Exception in thread "AWT-EventQueue-2" java.security.AccessControlException: access denied (java.io.FilePermission tempfile.jpeg read)
	at java.security.AccessControlContext.checkPermission(Unknown Source)
	at java.security.AccessController.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkRead(Unknown Source)
	at java.io.File.isFile(Unknown Source)
	at org.apache.commons.httpclient.methods.multipart.FilePartSource.<init>(FilePartSource.java:67)
	at org.apache.commons.httpclient.methods.multipart.FilePart.<init>(FilePart.java:126)
	at test.PasteImagePanel$5.actionPerformed(PasteImagePanel.java:149)

This is an excerpt of my code

					BufferedImage saveImage;

					// more irrelevant code for processing the image

					File tempFile = new File("tempfile.jpeg");
				try
				{
					ImageIO.write(saveImage, "jpeg", tempFile);
					// Added this output lines to make sure I could read and write to the file.
					// It returned 'true' for both cases
					System.out.println("    tempFile.canRead() : " + tempFile.canRead());
					System.out.println("    tempFile.canWrite() : " + tempFile.canWrite());

				PostMethod filePost = new PostMethod(props.getProperty("createDocumentURL"));
				  Part[] parts = {
				      new FilePart("file-nl", tempFile)
				  };
				  filePost.setRequestEntity(new MultipartRequestEntity(parts, filePost.getParams()));
				  filePost.setRequestHeader("Cookie", props.getProperty("cookie"));
				  HttpClient client = new HttpClient();
				  int status = client.executeMethod(filePost);

[Ulf Dittmer]

In addition to signing the applet, you may have to run the code as privileged; se HowCanAnAppletReadFilesOnTheLocalFileSystem for details.

[Paul Clapham]

Jeroen De Schutter wrote:Well, id did sign the applet. I was able to write a (temporary) file to the disk of the client machine but when I tried to upload the file using Apache HttpClient, i did get an AccessControlException.

And did you sign the jar containing HttpClient the same way as you signed your applet? Notice from the stack trace
that it's the HttpClient code which is getting the exception.