how to solve the access problem

[jlih]

Hi, everyone
I've got a problem in using applet. there will be a problem like this

Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission gov.nasa.worldwind.config.file read)
at java.security.AccessControlContext.check Permission(Unknown Source)
at java.security.AccessController.checkPerm ission(Unknown Source)
at java.lang.SecurityManager.checkPermissio n(Unknown Source)
at java.lang.SecurityManager.checkPropertyA ccess(Unknown Source)
at java.lang.System.getProperty(Unknown Source)
at gov.nasa.worldwind.Configuration.initial izeCustom(Configuration.java:89)
at gov.nasa.worldwind.Configuration.<init>( Configuration.java:46)
at gov.nasa.worldwind.Configuration.<clinit >(Configuration.java:34)
... 13 more

I used to solve it by adding "permission java.security.AllPermission;" in security policy file
Is there any better way to deal with problem?

Thanks in advance

[patmurris]

Did you sign the jar?

[jlih]

Originally Posted by patmurris

Did you sign the jar?

I signed the applet..
should i change the policy file as well?
thanks

[bianconera]

I would like to push this thread up as I ran into a very similiar problem as jlih had. By the way, jlih have you got any solution to it?

I am developing an applet which will hopefully enable the user to overlay any OGC WMS on WWJ by simply passing its URL via an input dialogue box. At the moment, I've developed a class that takes in an input URL and generates a number of WMSTiledImageLayer objects depending on how many layers that a WMS service contains. WWJ then adds and display those generated WMSTiledImageLayer on the globe.

I tried it with both application and applet. It turned out successful on the application but failed the applet. Here is what I got in the Java Console.

java.security.AccessControlException: access denied (java.net.SocketPermission www2.demis.nl:80 connect,resolve)
	at java.security.AccessControlContext.checkPermission(Unknown Source)
	at java.security.AccessController.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkConnect(Unknown Source)
	at sun.net.www.http.HttpClient.openServer(Unknown Source)
	at sun.net.www.http.HttpClient.<init>(Unknown Source)
	at sun.net.www.http.HttpClient.New(Unknown Source)
	at sun.net.www.http.HttpClient.New(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
	at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(Unknown Source)
	at com.sun.org.apache.xerces.internal.impl.XMLVersionDetector.determineDocVersion(Unknown Source)
	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(Unknown Source)
	at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(Unknown Source)
	at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(Unknown Source)
	at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(Unknown Source)
	at javax.xml.parsers.DocumentBuilder.parse(Unknown Source)
	at geo.wwj.layers.wms.OGCWMSFactory.createWMSConnection(Unknown Source)
	at geo.wwj.applet.WWJApplet.connectToWMS(Unknown Source)
	at geo.wwj.applet.WWJApplet.drawMBR(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.invoke.JSInvoke.invoke(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
	at sun.plugin.com.MethodDispatcher.invoke(Unknown Source)
	at sun.plugin.com.DispatchImpl.invokeImpl(Unknown Source)
	at sun.plugin.com.DispatchImpl$1.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.plugin.com.DispatchImpl.invoke(Unknown Source)
java.lang.NullPointerException
	at geo.wwj.applet.WWJApplet.connectToWMS(Unknown Source)
	at geo.wwj.applet.WWJApplet.drawMBR(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.invoke.JSInvoke.invoke(Unknown Source)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
	at sun.plugin.com.MethodDispatcher.invoke(Unknown Source)
	at sun.plugin.com.DispatchImpl.invokeImpl(Unknown Source)
	at sun.plugin.com.DispatchImpl$1.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.plugin.com.DispatchImpl.invoke(Unknown Source)
java.lang.Exception: java.lang.NullPointerException
	at sun.plugin.com.DispatchImpl.invokeImpl(Unknown Source)
	at sun.plugin.com.DispatchImpl$1.run(Unknown Source)
	at java.security.AccessController.doPrivileged(Native Method)
	at sun.plugin.com.DispatchImpl.invoke(Unknown Source)

Obviously, the applet failed to connect to the WMS server and retrieve Capabilities xml. Interestingly, it worked out fine on the application.

Then I tried to make a new WMS layer class and point the serviceUrl to this WMS service, and added the layer to the properties file. The applet loaded up the layer and got the image overlayed on the globe.

I know there is strict network connection restrictions imposed on unsigned applets, but mine is a signed one.

Could anybody give me a clue how the WWJ Applet example manages to load WMS services written in the properties file with no network connection restriction issue?

Thanks in advance!

[WindRider]

I've got something similar in my Web Start application:

java.lang.ExceptionInInitializerError
	at com.buildware.navigator.FlightNavigator.<clinit>(FlightNavigator.java:382)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
	at java.lang.reflect.Method.invoke(Unknown Source)
	at com.sun.javaws.Launcher.executeApplication(Unknown Source)
	at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
	at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
	at com.sun.javaws.Launcher.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied (java.util.PropertyPermission gov.nasa.worldwind.config.file read)
	at java.security.AccessControlContext.checkPermission(Unknown Source)
	at java.security.AccessController.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkPermission(Unknown Source)
	at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
	at java.lang.System.getProperty(Unknown Source)
	at gov.nasa.worldwind.Configuration.initializeCustom(Unknown Source)
	at gov.nasa.worldwind.Configuration.<init>(Unknown Source)
	at gov.nasa.worldwind.Configuration.<clinit>(Unknown Source)
	... 10 more

My JAR is signed. The line 382 where crash happens is:

static
    {
        if (Configuration.isMacOS())
...
    }

The JNLP has <all-permissions/> security. I've checked if worldwind.jar is signed and it surely is. Do you know why happens this?

[patmurris]

bianconera: did you confirm this issue on different computers and/or on different networks? Is there any javascripting involved at applet startup?

both: can you post your html/xml applet/jnlp code? Thanks.

[WindRider]

Sorry, I deleted <all-permissions/> by accident. The problem is fixed, but now I have different problem. I get an error "JAR resources in JNLP file are signed by different certificates". I've signed worldwind.jar with the same keystore as my JAR. Here is the resources section:

<resources>
	<j2se href="http://java.sun.com/products/autodl/j2se" version="1.5+" initial-heap-size="512m" max-heap-size="512m"/>	
	<property name="sun.java2d.noddraw" value="true"/>
	<extension name="jogl" href="http://download.java.net/media/jogl/builds/archive/jsr-231-webstart-current/jogl.jnlp"/>
	<jar href="gpsinput-0.5.3.jar"/>
	<jar href="gpstool-0.5.3.jar"/>	
	<jar href="worldwind.jar"/>	
        <jar href="FlightNavigator.jar" main="true"/>
    </resources>

How to find out which is the differently signed JAR? Maybe the JOGL JAR files? Please, help!

[WindRider]

I have put the worldwind.jar ver.0.6.61.9736 in the same directory. It is signed by NASA. Then I signed it twice with my keys. Is this could be the problem?

[WindRider]

Yes, this caused the problem. I compiled WW into a new jar, which is unsigned as you know. Then signed it with my key and voila!

[patmurris]

Thanks for the feedback WindRider