[ https://issues.apache.org/jira/browse/PDFBOX-2397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194974#comment-14194974 ]
Tilman Hausherr commented on PDFBOX-2397: ----------------------------------------- Yes, for cases where we expect an exception anyway. But that code still throws a SecurityException (which is not a PrivilegedActionException) if the applet doesn't have the permissions. The problem why I've done nothing in this issue (that is easy to solve) is that I want a response from [~bgillis] first. He said "You don't need to put it between a try/catch statement as it doesn't throw any exception" and I do get an exception. He knows more about applets than me so I'd like to have an agreement on this before making any changes. > Running within an Applet throws an AccessControlException > --------------------------------------------------------- > > Key: PDFBOX-2397 > URL: https://issues.apache.org/jira/browse/PDFBOX-2397 > Project: PDFBox > Issue Type: Bug > Components: PDModel > Affects Versions: 1.8.7 > Environment: JRE 7u67 or JRE 6u45 (Windows 7 SP1 64bit) > Reporter: Bertrand Gillis > Assignee: Tilman Hausherr > Fix For: 1.8.8 > > > As soon as PDFBox is embedded in a signed applet, the following exception is > thrown when I try to print a PDF document through PDFBox: > {code} > Caused by: java.security.AccessControlException: access denied > ("java.util.PropertyPermission" "org.apache.pdfbox.ICC_override_color" "read") > at java.security.AccessControlContext.checkPermission(Unknown Source) > at java.security.AccessController.checkPermission(Unknown Source) > at java.lang.SecurityManager.checkPermission(Unknown Source) > at sun.plugin2.applet.AWTAppletSecurityManager.checkPermission(Unknown > Source) > at java.lang.SecurityManager.checkPropertyAccess(Unknown Source) > at java.lang.System.getProperty(Unknown Source) > at java.lang.Integer.getInteger(Unknown Source) > at java.lang.Integer.getInteger(Unknown Source) > at java.awt.Color.getColor(Unknown Source) > at java.awt.Color.getColor(Unknown Source) > at > org.apache.pdfbox.pdmodel.graphics.color.PDColorState.<clinit>(PDColorState.java:50) > {code} > This issue was also in previous PDFBox versions for the following instruction: > {code:title=BaseParser.java} > FORCE_PARSING = Boolean.getBoolean("org.apache.pdfbox.forceParsing"); > {code} > But it was fixed in later versions: > {code:title=BaseParser.java} > static { > try { > FORCE_PARSING = Boolean.getBoolean("org.apache.pdfbox.forceParsing"); > } > catch (SecurityException e) {} > } > {code} > This fixed is unfortunately not set for the current property: > {code:title=PDColorState.java} > private static volatile Color iccOverrideColor = > Color.getColor("org.apache.pdfbox.ICC_override_color"); > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)