Webstart security problem

[Sean Mullan]

Can you get the full exception stack traces? As Max alluded to, there 
may be code further up the stack that does not have the right 
permissions. It could be an issue with a module that has been 
de-privileged and it may need to be granted additional permissions.

Also, running with -Djava.security.debug=access,domain,failure would be 
useful as it should dump out the ProtectionDomain that is causing the 
AccessControlException.

--Sean


On 11/3/16 12:09 PM, Mueller-Schramm, Gerd wrote:
> Hi,
>
> When try to access a web service via java.xml.ws module from a Webstart application I get the following exception:
>
> java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\Program Files (x86)\Mozilla Firefox\basename" "read")
>              at java.security.AccessControlContext.checkPermission(java.base at 9-ea/AccessControlContext.java:471)
>              at java.security.AccessController.checkPermission(java.base at 9-ea/AccessController.java:894)
>              at java.lang.SecurityManager.checkPermission(java.base at 9-ea/SecurityManager.java:548)
>              at com.sun.javaws.security.JavaWebStartSecurity.checkPermission(jdk.javaws at 9-ea/JavaWebStartSecurity.java:237)
>              at java.lang.SecurityManager.checkRead(java.base at 9-ea/SecurityManager.java:887)
>              at java.io.File.isDirectory(java.base at 9-ea/File.java:845)
>              at java.io.File.toURI(java.base at 9-ea/File.java:733)
>             ...
>
> and later after asking me for permission to connect to the webservice URL:
>
> java.security.AccessControlException: access denied ("java.net.NetPermission" "getProxySelector")
>              at java.security.AccessControlContext.checkPermission(java.base at 9-ea/AccessControlContext.java:471)
>              at java.security.AccessController.checkPermission(java.base at 9-ea/AccessController.java:894)
>             ...
>
> although I've added
>   <security>
>     <all-permissions />
>   </security>
>
> to the JNLP-file and signed the Jars.
>
> The same Webstart application works with Java 8.
>
> Is there anything else that I need to configure?
>
> I'm using JRE-version 9-ea+142 Java HotSpot(TM) 64-Bit Server VM on Windows 7.
>
> Best regards,
> Gerd
>
> Gerd Müller-Schramm
> Software Developer, GeoMedia Smart Client Kommunal
> T: +49 341 92 60 30 47
> E: gerd.mueller at hexagongeospatial.com<mailto:gerd.mueller at hexagongeospatial.com>
>
> Hexagon Geospatial
> Wittenberger Straße 15B
> 04129 Leipzig, Germany
> hexagongeospatial.com<http://hexagongeospatial.com/>
>
>