tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Antony Bowesman <...@teamware.com>
Subject Repost:HELP! Security question - grant entries
Date Fri, 16 Nov 2001 07:57:26 GMT
Hi,

How can you assign permissions to code compiled from a JSP, it is
possible or do you have to put all code that performs actions that may
encounter security checks inside a bean and then allocate permissions to
the bean class?

I tried adding 

grant codeBase
"file:${catalina.home}/work/localhost/examples/jsp/security/protected/-"
{
        permission java.security.AllPermission;
};

to the conf/catalina.policy but I get an AccessControlException because
the compiled code in the stack frame

org.apache.jsp.index$jsp._jspService(index$jsp.java:116)

does not have permission.

It's tomcat 4.0

Any ideas?
Antony

--
To unsubscribe:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands: <mailto:tomcat-user-help@jakarta.apache.org>
Troubles with the list: <mailto:tomcat-user-owner@jakarta.apache.org>


Mime
View raw message