users@glassfish.java.net

Java Web Start and Security Policy

From: Edmondo Porcu <edmondo.porcu_at_gmail.com>
Date: Thu, 6 Jan 2011 11:51:04 +0100

Dear all,
I am trying an application client in Glassfish 3.0.1 and I am strating it
through web start. the application is packaged inside an Ear. In my jnlp I
specify:

<jnlp spec="1.0+" codebase="" href="">
    <information>
        <title>Gottware Terminal</title>
        <vendor>GottexBrokers S.A..</vendor>
        <homepage href="http://localhost:8080/GottwareTerminal/Start" />
        <description>Gottware Terminal client with Excel Real Time
Extension</description>
        <description kind="short">Gottware Terminal client with Excel Real
Time Extension</description>
    </information>
        </information>
    <security>
        <all-permissions/>
    </security>
    <resources>

    </resources>
    <application-desc main-class="gottwareterminal.Main">
        <!-- Application Arguments -->
    </application-desc>
</jnlp>

If I take the generated jnlp by glassfish, it still contains security - all
permsissions.
I have signed my main jar (the app-client jar) and the jar containing the
access to disk, which fails at t.createNewFile() because gottwareDir.mkdir
has failed.

Any idea

    userDir = new File(System.getProperty("java.io.tmpdir"));
        gottwareDir = new File(userDir, FOLDER);

        gottwareDir.mkdir();
        t = new File(gottwareDir,"gottware1.got");
        tminus1 = new File(gottwareDir,"gottware2.got");
        tminus2 = new File(gottwareDir,"gottware3.got");
        try{
            t.createNewFile();
            tminus1.createNewFile();
            tminus2.createNewFile();
        }
        catch(Exception e){
            e.printStackTrace();
        }

    }



Best Regards
Edmondo Porcu