Anyone knows how to deal with mail session -security error for TC5.5.4

[David Lee]

if running tomcat5.5.4 without turning on -security, everything works
fine for jndi context mail session and DBCP.
But if -security turned on, I got the following errors.
 
If anyone can point to me what I missed or did wrong, greatly
appreciated.
 
Thanks
 
David
 
1. TC errors
 
access: access allowed (java.util.PropertyPermission line.separator
read) Nov 8, 2004 9:55:25 PM org.apache.naming.NamingContext lookup
WARNING: Unexpected exception resolving reference
java.security.AccessControlException: access denied
(java.util.PropertyPermission javax.mail.Session.Factory read)  at
java.security.AccessControlContext.checkPermission(AccessControlContext.
java:264)
 at
java.security.AccessController.checkPermission(AccessController.java:427
)
 at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
 

2. catalina.policy:
 
grant codeBase
"file:${catalina.home}/webapps/javaxml2/WEB-INF/classes/UpdateItemServle
t.class" {
        permission java.net.SocketPermission
"localhost:1521","connect,resolve";
   permission java.util.PropertyPermission
"javax.mail.Session.Factory","read";
   permission java.net.SocketPermission
"localhost:25","connect,resolve"; };