JDK-7020285 : Getting java.lang.SecurityException: Permission denied since update 24
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 6,6u24
  • Priority: P2
  • Status: Closed
  • Resolution: Not an Issue
  • OS: generic,windows_xp
  • CPU: generic,x86
  • Submitted: 2011-02-17
  • Updated: 2012-03-20
  • Resolved: 2011-02-22
Related Reports
Relates :  
Description
FULL PRODUCT VERSION :
1.6.0_24

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows XP [Version 5.1.2600]

A DESCRIPTION OF THE PROBLEM :
My signed applet is getting ...

java.lang.SecurityException: Permission denied: file:/C:/Documents and Settings/All Users/Application Data/IBMERS/IBM GERS Release 1.6 - Core - MAC/
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

since updating to ...

Java Plug-in 1.6.0_24
Using JRE version 1.6.0_24-b07 Java HotSpot(TM) Client VM

All was fine until the update.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
For more report of this issue please go to the following link.

http://forums.oracle.com/forums/thread.jspa?threadID=2177273


REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
I must reverse back to update 23

Comments
EVALUATION according the forum, the user is trying to implement offline mode with a browser http doc base and a local file path codebase in applet tag. In order to do offline mode, every bits needs to be on the local system, including the html/js loaded by the browser. If I understand the posting in forum correctly, they are trying to load the html via browser, using a http URL, e.g: http://your_host.com/applet.html And inside applet.html, customer have codebase pointing to c:\some_files This will not work due to security reasons. And most browser blocks this too, e.g: <img src="c:\some_pic.gif"/> won't load either by a browser, if the html is loaded via http://your_host.com/img.html So if customer want to use codebase with a local path, the browser html/js file itself needs to be loaded from the local file system too.
22-02-2011