Now I have exactly set java.security.policy and
java.security.auth.login.config in jspwiki.properties, but none of
these
seem to be reflected. Other properties were changed successfully
though.
The jspwiki.properties also says something about specifying
properties for
the JRE. Unfortunately, I am not able to set JAVA_OPTS or
CATALINA_OPTS,
since I have no control over Tomcat.
Err, yes, that would be your problem. The java.security.* properties
are system properties, and they must be set by setting JAVA_OPTS or
CATALINA_OPTS. They cannot be set in jspwiki.properties at all.
/Janne
