SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Sat, 15 May 2004 16:27:45 PDT7
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Capabilities of Java/Java applets

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <200405150942890.SM01232@MAIN>, on 05/15/04
at 09:31 AM, "Mark Abramowitz" said:

>"The downloadable Windows version saves notes and stats on each user's
>local disk. This is something a Java applet cannot do.

In general this is true. The default security rules for applets differ
from applications. The downloadable applications general have more
default access, although this depends a lot on which java version you run
and what libraries are installed. For example, Polarbar running under
bare 1.1.8 has access to anywhere because v1.1.8's security model is not
fully implemented without additional libraries. Under v1.3, Polarbar
needs to be given access via the policy file. Most users use:

grant {
permission java.security.AllPermission;
};

which opens the doors very wide. For an applet to get access to to your
local drive would take something like:

grant codebase "file://J:/sla_dev2/TestJava2" {
permission java.security.AllPermission;
};

There are lots of variations. A goggle for

java policytool site:sun.com

will get you more info.

Another option is signed applets. This all based on digital certificates.
Google for:

certificates applets site:sun.com

>Can I then say something like "This is not true. It is possible to offer
>the option to allow the Java applet to save this data drive. This can be
>done by requesting the user's permission to modify .java.policy giving
>permission for file operations."

Well, the user would have to modify the policy file or it is catch-22.

You could discuss the options with them. I suspect they would not want to
open themselves to the security issues.

If the downloaded version is a java application, you should just be able
to run it.

HTH,

Steven

--
----------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.41 #10183 Warp4/FP15/14.093c_W4
www.scoug.com irc.webbnet.info irc.fyrelizard.org #scoug (Wed 7pm PST)
----------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 15 | May | 2004 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.