Struts & Java 2 Security??

[Mervin Williams]

I have a Struts application running on IBM WAS 5.0.  Without Java 2
Security 
disabled, all works well.  However, with Java 2 Security enabled, the 
application will not come up in the browser.

I've included the contents of my was.policy file as well as the errors
recorded 
in my SystemOut.log file.  Are the permissions that I set in the policy
file 
correct?  Are they sufficient to correct the errors in the log file?

Here is the contents of my was.policy file:
===================================
grant codeBase "file:${jars}" {
  permission java.io.FilePermission 
"${was.install.root}${/}lib${/}ws-commons-logging.jar", "read"; };

grant {
  permission java.util.PropertyPermission "*", "read, write"; };

grant codeBase "file:${webComponent}" {
  permission java.lang.RuntimePermission "getClassLoader";
};
=======================================
 
Here are the errors in the log file:
=======================================
Permission:  

\G:\Program Files\WebSphere\AppServer\lib\ws-commons-logging.jar :
access denied  (java.io.FilePermission \G:\Program 
Files\WebSphere\AppServer\lib\ws-commons-logging.jar read)

Code:
     org.apache.struts.action.ActionServlet  in  {file:/G:/Program 
Files/WebSphere/AppServer/installedApps/INNOVASERVER01/landworx.ear/land
worx.war/WEB-INF/lib/struts.jar}

-------------------------------

Permission:

      * : access denied (java.util.PropertyPermission * read,write)


Code:

     org.apache.struts.action.ActionServlet  in  {file:/G:/Program 
Files/WebSphere/AppServer/installedApps/INNOVASERVER01/landworx.ear/land
worx.war/WEB-INF/lib/struts.jar}

--------------------------------

Permission:

      getClassLoader : access denied (java.lang.RuntimePermission 
getClassLoader)


Code:

     org.apache.struts.util.RequestUtils  in  {file:/G:/Program 
Files/WebSphere/AppServer/installedApps/INNOVASERVER01/landworx.ear/land
worx.war/WEB-INF/lib/struts.jar}
=======================================


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>