Re: java.security.manger policy question
On Mar 11, 8:57 am, Marcin Kasprzak <n...@email.address> wrote:
On Sun, 09 Mar 2008 17:51:52 -0700, Andrew Thompson wrote:
On Mar 10, 5:01 am, Marcin Kasprzak <n...@email.address> wrote:
...
Is it somehow possible to deny access for one application
to a specific resource whereas allow access for the rest
within one policy?
Did you ask a question related to security recently?
Yes two days ago, on this newsgroup.
Please don't split threads - it would have made
more sense to add a follow-up to the earlier
question.
This post reminds me of it, since it asks a question
that itself raises many more questions.
Perhaps you could help answer a swathe of those
questions by telling us what it is you intend to
offer to the end user, rather than pursue some
strategy that you believe will achieve that.
Actually not sure what you mean. There is "no story"
behind those questions if that's what you mean...
I have a homework to do ..
Ahh.. That explains a lot of why this exercise sounds
quite 'arbitrary'.
.. i.e. writing a small project
in which I need to use some of security features,
but not sure if I understand them correctly.
I believe that explanation of the question is pretty clear,
if not please let me know which part is not clear?
I'm clear now.
Arne asked you a very relevant question on the
tail of the first thread. I was waiting to hear
what you'd say, before launhcing into this matter.
I initially thought that a strategy you might look
into would be to launch the project as a sandboxed
applet (or *from* an applet), or web start project.
They both provide a 'default' security environment
that prevents file access (OK - JWS has ways to
get around that limitation - but only if we code them).
OTOH - I do not think either of these solutions
satisfies the basic requirement to assign 'fine grained'
control over what the user can and cannot do.
You might purszue the strategy of getting policy
files to work as you want, but I don't mess with
those usually - instead I would look into this
little 'hack' to achieve what is required.
<http://groups.google.com.au/group/comp.lang.java.programmer/msg/
f29ab45389d9f5f2>
That one deals with calling System.exit(), but
should be trivial to change for file access.
--
Andrew T.
PhySci.org