Title: Applet security

Hello everybody:

This days I have been implementing a little Java3D applet including it in a Web Server.

When I have launched remotely ( or not ) the applet I have received several security exceptions.

I am suposing this things:

        - When I launch a Java3D code inside an applet I only include in the codebase of the applet the jar file with my own implementation, not including Java3D core .jar files.

        - I supose that then the remote machine that is running the applet downloaded from the server needs to have installed the Java3D core locally.

        - I supose too that Java3D core will run then (locally too) OpenGL or DirectX native code.

So the idea could be that if I ensure permissions for the codebase coming in from the remote Web server the applet will run OK.

So I use the java policytool command and I give permissions for the codebase coming from http://remoteServer/code_path/-

I reach in this moment my first problem:

�Wich permissions should I give to the applet codebase?

I have been trying giving the exactly needed permissions but they were a lot and I became bored...

I had to give permission for Runtime, for Property and I noticed that for every library or dll method of Java3D I had to give another new permission.

So I decided to give AllPermisions for this codebase.

But it had no effect.

Trying more I found the worst solution ever known: To give AllPermision for ALL the codebase I could receive.

And it worked correctly.

Anyway I think that is not a good decision, so if anyone has been suffering the same problems and has found a better solution please let me know. I said it before, I have hunger of knowledge.

Forgive me about my spaggheti english, I am young and yet I have time to learn it better.

Merry Christmas and Happy New Year.

Reply via email to