Tomcat Permissions - java.io.FileNotFoundException Permission denied

[jite eghagha]

I've got a problem writing a pdf file to a folder. Part of my work already has PHP reading and writing to this folder. The folders read/write permissions are set correctly

But i can't write to it with my jsp application.

I understand there are SecurityManager Permission classes applicable to Tomcat such as: java.io.FilePermission each controls read/write/execute access to files and directories.

In tomcat 5.5 - i have a catalina.policy file, but i don't know how to grant permission to read/write to that folder

I added this to the catalina.policy file under _ web application permissions _ , but it doesn't work.

grant{ 
permission java.io.FilePermission "/home/admin/public_html/sandbox/server/applicantForms","read,write";
};

ERROR

exception

org.apache.jasper.JasperException: Exception in JSP: /NewFile.jsp:20

17:  String GENLABOUT = "/home/admin/public_html/sandbox/server/applicantForms/164287384763216/GENLABOUT.pdf";
18: 
19: javaApplication3 pdf = new javaApplication3("GENLAB", "Techneaux Technology LLC", "jite eghagha");
20: pdf.drawPage_1(GENLAB,GENLABOUT); 	
21: } catch (DocumentException e) {
22: 	// TODO Auto-generated catch block
23: 	e.printStackTrace();


Stacktrace:
	org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:491)
	org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:401)
	org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:308)
	org.apache.jasper.servlet.JspServlet.service(JspServlet.java:259)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:729)

root cause

java.io.FileNotFoundException: /home/admin/public_html/sandbox/server/applicantForms/164287384763216/GENLABOUT.pdf (Permission denied)
	java.io.FileOutputStream.open(Native Method)
	java.io.FileOutputStream.<init>(FileOutputStream.java:194)
	java.io.FileOutputStream.<init>(FileOutputStream.java:84)
	com.srccodes.example.javaApplication3.drawPage_1(javaApplication3.java:78)
	org.apache.jsp.NewFile_jsp._jspService(NewFile_jsp.java:62)
	org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
	org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:371)
	org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:308)
	org.apache.jasper.servlet.JspServlet.service(JspServlet.java:259)
	javax.servlet.http.HttpServlet.service(HttpServlet.java:729)

[Paul Clapham]

jite eghagha wrote:I've got a problem writing a pdf file to a folder. Part of my work already has PHP reading and writing to this folder. The folders read/write permissions are set correctly

But i can't write to it with my jsp application.

Then that suggests to me that the two applications might be running under different user profiles. Check out whether your so-called "correct" permissions work the same for both profiles.

[jite eghagha]

Yes, they are both in two different profiles - the PHP doesn't run in Tomcat. The jsp is running on Tomcat 5.5 i installed on the Godaddy VPS.

I can read files in the folder.

        PdfReader reader = new PdfReader(src); // reads a pdf file without errors
        PdfStamper stamper = new PdfStamper(reader, new FileOutputStream(dest));// creating a FileOutPutStream causes the error
        

causes this error......java.io.FileNotFoundException: /home/admin/public_html/sandbox/server/applicantForms/164287384763216/GENLABOUT.pdf (Permission denied)

[Maxim Karvonen]

It's not a JVM-level permission, it's an OS-level permission. You cannot fix with problem with SecurityManager configuration. You should modify OS-level permissions for that directory or run both applications using same system account. Just for test calling "chmod +w <directory>" should fix the problem (you may also need to set write permission on individual files). Note that "read permission" and "write perimission" are not a same permission. So it is possible that some account can read directory but can't write into it.

[Tim Holloway]

Typically, an Apache (PHP) web server will run under one userID, such as "apache" and the Tomcat web server will run under a userID of its own, such as "tomcat".

In order for both users to be able to write, both userids would have to be in a write-enabled protection group for that particular directory.