JDK-7043605 : AccessControlException throws in an applet if the calling unsigned jar file is in Java cache
  • Type: Bug
  • Component: deploy
  • Sub-Component: deployment_toolkit
  • Affected Version: 6,7
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: windows_xp
  • CPU: x86
  • Submitted: 2011-05-10
  • Updated: 2011-05-25
  • Resolved: 2011-05-25
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7
7 b143Fixed
Related Reports
Duplicate :  
JDK-6593830 - FactoryURLClassLoader permissions constrain security-related applet operations
Description
Receive the follow exception in an applet if the calling unsigned jar file 
is in the Java cache. 
On the first run or if clear the cache then this 
exception does not occur. 

It can be reproduced with Java 1.6.0_24, 1.6.0_25 and 1.7.0-ea-b134. 

It occur only with an applet and not with Java Web Start.

1.) This is very inconsistent.
2.) The exception should not occur. 
3.) if access http.agent then it shoudl be in a privilage context.

java.security.AccessControlException: access denied (java.util.PropertyPermission http.agent read)
             at java.security.AccessControlContext.checkPermission(Unknown Source)
             at java.security.AccessController.checkPermission(Unknown Source)
             at java.lang.SecurityManager.checkPermission(Unknown Source)
             at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
             at java.lang.System.getProperty(Unknown Source)
             at com.sun.deploy.net.BasicHttpRequest.createUrlConnection(Unknown Source)
             at com.sun.deploy.net.BasicHttpRequest.doRequest(Unknown Source)
             at com.sun.deploy.net.BasicHttpRequest.doGetRequestEX(Unknown Source)
             at com.sun.deploy.net.DownloadEngine.isUpdateAvailable(Unknown Source)
             at com.sun.deploy.cache.DeployCacheHandler.get(Unknown Source)
             at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
             at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
             at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
             at com.inet.jortho.WordIterator.createInflaterStream(Unknown Source)
             at com.inet.jortho.WordIterator.<init>(Unknown Source)
             at com.inet.jortho.DictionaryFactory.loadWordList(Unknown Source)
             at com.inet.jortho.SpellChecker$LanguageAction$1.run(Unknown Source)
             at java.lang.Thread.run(Unknown Source)
Comments
EVALUATION Since caching of client code URLConnection accesses has been supported, we need to add priviledge to allow read of system property 'http.agent' for setup connection user agent.
13-05-2011