catalina policy fun

hello everyone..

I'm getting a bit stuck here with setting up my policy file in
Tomcat5.5. I have read the paper at https://jiniservlet.dev.java.net/
very nice. I'm running a Blitz Javaspace (all works super) and my web
application just connects and does read, write, takes (all very simple).
I first added the 'jsk-platform.jar', 'jsk-lib.jar' jars to my
'Tomcat/common/lib' directory, next I edited the catalina.policy file
adding:

grant  {
    permission java.security.AllPermission;
};

Ran my webapp and all worked nicely... But I'm not sure its a good idea
to grant AllPermission to Tomcat? So I removed that and added the
following instead:

// Javaspace permissions granting.
grant codeBase
"file:${catalina.home}/webapps/FiveWebSpace/WEB-INF/classes/-" {
    permission java.security.AllPermission;
};

grant codeBase "file:${catalina.home}/common/lib/jsk-platform.jar" {
    permission java.security.AllPermission;
};

grant codeBase "file:${catalina.home}/common/lib/jsk-lib.jar" {
    permission java.security.AllPermission;
};

'FiveWebSpace being my webapp. But I always get the
'java.security.AccessControlException: access denied
(net.jini.deiscovery.DiscoveryPermission *)' when running with just
these granted permisssons. I'm i missing a class, jar or grant config?

On a side note; if i do grant all permissions, is that like not running
Tomcat in security mode?

ta

aNt

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff JAVASPACES-USERS".  For general help, send email to
[email protected] and include in the body of the message "help".

To view past JAVASPACES-USERS postings, please see:
http://archives.java.sun.com/archives/javaspaces-users.html