Mr. Weller,

please do your best from assuming im a total moron, because i can assure
that not only is google something I use alot, but i have ATTEMPTED to follow
all the syntax mentioned in all the java.com documentation which is WHY i
have turned to this mailing list.

So please ASSUME that i actually NEED help, not a bunch of half-assed google
links!!

for crying out loud...

to rephrase my question:

I have fully attempted to restrict my JSP page's ability to read and write
files. my catalina.policy section currently looks like this:

grant {
       permission java.io.FilePermission "<<ALL FILES>>", "read";
       permission java.io.FilePermission "<<ALL FILES>>", "write";
       permission java.io.FilePermission "<<ALL FILES>>", "execute";
};

this is obviously dangerous, and I have done everything in the "<<ALL
FILES>>" section to get catalina to restrict the file privileges to a couple
of specific directories, such as:

"/home/seaver/-"

starting up catalina with the security manager produces no problem, but the
files im trying to write, refuse to be written, as if they can't be written
anywhere.

With the "<<ALL FILES" token, it DOES work, so I must be missing something
here?

anybody who thinks i might need a little more than a generic google search,
pls help me out...

S

> I have a bean whose methods are called from a JSP page. > > Im trying to set up the catalina.policy file to allow very specific > read/write access for my bean. > > It is not recognising, or reading/writing to either the Codebase I give it, > or the directories i want it to read/write in, no matter what I try and > write!! > > I was wondering, should the codebase be the http address of my JSP page, or > the directory path to my bean?

Two minutes of googling (see [1] and [2]) brought up [3] which is IMO
exactly what you want.
Always remember: Google is your friend!

-mw

[1]
http://www.google.de/search?q=java+policy+docs&ie=UTF-8&oe=UTF-8&hl=de&meta=
[2]
http://www.google.de/search?hl=de&ie=UTF-8&oe=UTF-8&newwindow=1&q=java+polic
y+examples&meta=
[3]
http://java.sun.com/products/jdk/1.2/docs/guide/security/permissions.html#Fi
lePermission

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html


_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html



Reply via email to