JDK-7179600 : Attempting to print from an unsigned applet causes multiple print access Security Dialogs to appear
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 7u4
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: windows_xp
  • CPU: x86
  • Submitted: 2012-06-25
  • Updated: 2013-12-03
  • Resolved: 2012-07-04
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7 JDK 8
7u6Fixed 8 b46Fixed
Related Reports
Relates :  
JDK-7181300 - SecurityManagerHelper.printDialog need to save checkbox status
Relates :  
JDK-7152028 - Warning dialog for unsigned applet printer access no longer has checkbox
Description
When attempting to print from the wordle.net applet (very popular Java based applet), the Security Warning dialog (attached) shows multiple times.  On my Win7 machine, it shows twice (two items in the printer dropdown), and on my Mac it shows four times (four printers installed).  Not sure if that's a coincidence or not.  

Steps to reproduce:
1) go to http://wordle.net
2) Click on one of the examples
3) Applet loads
4) Click the Print... button below the graphic
5) Security warning appears (expected)
6) Click OK (but do not click "Always allow"
7) A second security warning dialog appears that is identical to the first.
8) Keep hitting OK until an actual print dialog is displayed.

This might be related to the fix for 7152028
Comments
regression_test_src:http://sqe-hg.us.oracle.com/hg/index.cgi/testbase/javase/functional/8/deployment2/file/55cf37386d83/new_framework/tests/common/UserDecisionOption/src/UserDecisionOption_AppletTag_Test.java testUDO_medium_unsigned_AccessResource_jApplet entry.
03-12-2013
Verified with jre8 b118 on win7 x86.
03-12-2013
EVALUATION Added code to always cache answer per applet session. Filed 7181300 for future work.
03-07-2012
EVALUATION This happens because applet actually makes multiple calls to select printer, create job, etc. They all require permission to use printer. I am not clear on the role of checkbox here. According to current implementation it grants access to the printer to the current applet session only. And without checkbox we will ask every single time. This does not seem right. Perhaps checkbox is intended to grant permissions to this applet permanently and without checkbox we need to grant them for the session?
02-07-2012
SUGGESTED FIX Security Warning for printer access should only appear once per session for an applet, unless the user click the Always trust dialog box, and then it won't appear next session.
25-06-2012