Security with Tomcat and Soap

[Steeve Gilbert]

I've been using Soap with Tomcat and now I want to add the security
features of Tomcat.  The server starts fine except fort weird little error
message:

XXX resource not found !!! /org/apache/tomcat/resources/web.dtd
sun.misc.Launcher$AppClassLoader
XmlMapper: Can't find resource for entity: -//Sun Microsystems, Inc.//DTD Web 
Application 2.2//EN --> http://java.sun.com/j2ee/dtds/web-app_2_2.dtd
"/org/apache
/tomcat/resources/web.dtd"

But the server works anyway.  I can browse the web page ok ben if I go to
the Soap Admin screen (or i do other soap related stuff) I get this
error...

java.security.AccessControlException: access denied (java.io.FilePermission C:\Program 
Files\jakarta-tomcat-3.2.3\webapps\soap\WEB-INF\classes read)
     at 
java.security.AccessControlContext.checkPermission(AccessControlContext.java:195)
     at java.security.AccessController.checkPermission(AccessController.java:403)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
     at java.lang.SecurityManager.checkRead(SecurityManager.java:873)
     at java.io.File.isDirectory(File.java:566)

Then I tought adding the following lines to the tomcat.policy could help me
but it doesn't.

grant codeBase "file:${tomcat.home}/webapps/soap/-" {
  permission java.security.AllPermission;
};

Can someone help me?

Steeve...