Re: Security not recognising codebase...

Mr. Weller,

please do your best from assuming im a total moron, because i can assure
that not only is google something I use alot, but i have ATTEMPTED to follow
all the syntax mentioned in all the java.com documentation which is WHY i
have turned to this mailing list.

So please ASSUME that i actually NEED help, not a bunch of half-assed google
links!!

for crying out loud...

to rephrase my question:

I have fully attempted to restrict my JSP page's ability to read and write
files. my catalina.policy section currently looks like this:

grant {
        permission java.io.FilePermission "<<ALL FILES>>", "read";
        permission java.io.FilePermission "<<ALL FILES>>", "write";
        permission java.io.FilePermission "<<ALL FILES>>", "execute";
};

this is obviously dangerous, and I have done everything in the "<<ALL
FILES>>" section to get catalina to restrict the file privileges to a couple
of specific directories, such as:

"/home/seaver/-"

starting up catalina with the security manager produces no problem, but the
files im trying to write, refuse to be written, as if they can't be written
anywhere.

With the "<<ALL FILES" token, it DOES work, so I must be missing something
here?

anybody who thinks i might need a little more than a generic google search,
pls help me out...

S
>
> > I have a bean whose methods are called from a JSP page.
> >
> > Im trying to set up the catalina.policy file to allow very specific
> > read/write access for my bean.
> >
> > It is not recognising, or reading/writing to either the Codebase I give
>it,
> > or the directories i want it to read/write in, no matter what I try and
> > write!!
> >
> > I was wondering, should the codebase be the http address of my JSP page,
>or
> > the directory path to my bean?
>
>Two minutes of googling (see [1] and [2]) brought up [3] which is IMO
>exactly what you want.
>Always remember: Google is your friend!
>
>-mw
>
>[1]
>http://www.google.de/search?q=java+policy+docs&ie=UTF-8&oe=UTF-8&hl=de&meta=
>[2]
>http://www.google.de/search?hl=de&ie=UTF-8&oe=UTF-8&newwindow=1&q=java+polic
>y+examples&meta=
>[3]
>http://java.sun.com/products/jdk/1.2/docs/guide/security/permissions.html#Fi
>lePermission
>
>___________________________________________________________________________
>To unsubscribe, send email to [email protected] and include in the body
>of the message "signoff SERVLET-INTEREST".
>
>Archives: http://archives.java.sun.com/archives/servlet-interest.html
>Resources: http://java.sun.com/products/servlet/external-resources.html
>LISTSERV Help: http://www.lsoft.com/manuals/user/user.html


_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail

___________________________________________________________________________
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html