Change in security policy of getResourceAsStream

[Roedy Green]

It looks as though this code in an Applet has stopped working to fish
resources out of the jar. It used to work last year. It works in
Opera, but not Netscape or IE.

What the security problem with reading from your jar??

It works ok when I run the Applet off my server, but not off local
hard disk.

I checked the code for getResource and getResource as stream. they
both use the same Classloader.getResource.

InputStream is =
CurrCon.class.getResourceAsStream("/com/mindprod/currcon/exchs.ser");

This Applet code is in class com.mindprod.currcon.Currcon

java.security.AccessControlException: access denied
(java.io.FilePermission \E:\mindprod\currcon.jar read)

at
java.security.AccessControlContext.checkPermission(AccessControlContext.java:270)

at
java.security.AccessController.checkPermission(AccessController.java:401)

at
java.lang.SecurityManager.checkPermission(SecurityManager.java:542)

at java.net.URLClassLoader$5.run(URLClassLoader.java:476)

at java.security.AccessController.doPrivileged(Native Method)

at
java.net.URLClassLoader.getPermissions(URLClassLoader.java:474)

at
sun.applet.AppletClassLoader.getPermissions(AppletClassLoader.java:177)

at
sun.plugin.security.PluginClassLoader.getPermissions(PluginClassLoader.java:82)

at
java.security.SecureClassLoader.getProtectionDomain(SecureClassLoader.java:155)

at
java.security.SecureClassLoader.defineClass(SecureClassLoader.java:123)

at
java.net.URLClassLoader.defineClass(URLClassLoader.java:250)

at java.net.URLClassLoader.access$100(URLClassLoader.java:54)

at java.net.URLClassLoader$1.run(URLClassLoader.java:193)

at java.security.AccessController.doPrivileged(Native Method)

at java.net.URLClassLoader.findClass(URLClassLoader.java:186)

at
sun.applet.AppletClassLoader.findClass(AppletClassLoader.java:134)

at
sun.plugin.security.PluginClassLoader.findClass(PluginClassLoader.java:168)

at java.lang.ClassLoader.loadClass(ClassLoader.java:299)

at
sun.applet.AppletClassLoader.loadClass(AppletClassLoader.java:114)

at java.lang.ClassLoader.loadClass(ClassLoader.java:255)

at
sun.applet.AppletClassLoader.loadCode(AppletClassLoader.java:501)

at sun.applet.AppletPanel.createApplet(AppletPanel.java:567)

at
sun.plugin.AppletViewer.createApplet(AppletViewer.java:1778)

at sun.applet.AppletPanel.runLoader(AppletPanel.java:496)

at sun.applet.AppletPanel.run(AppletPanel.java:293)

at java.lang.Thread.run(Thread.java:536)

--
Canadian Mind Products, Roedy Green.
Coaching, problem solving, economical contract programming.
See http://mindprod.com/jgloss/jgloss.html for The Java Glossary.

[Michael Amling]

Roedy Green wrote:
> It looks as though this code in an Applet has stopped working to fish
> resources out of the jar. It used to work last year. It works in
> Opera, but not Netscape or IE.
>
> What the security problem with reading from your jar??
>
> It works ok when I run the Applet off my server, but not off local
> hard disk.

This isn't by any chance java 1.4? Many posts here at
comp.lang.java.security have documented things that for no particular
reason don't work in java 1.4. I have been recommending 1.3 to clients.

--Mike Amling