SecurityManager and policy files

I'm trying to figure out what additional grants are required for a web
application running under Tomcat. I downloaded a profiling security
manager from the web, and it works great, but produces copious amounts of
output, most of which I don't care about.

So I modified it to delegate security decisions to its superclass, but if
the superclass throw an exception, then to log the information and allow
the access. The idea being that I will get a file that shows me exactly
what permissions are missing from the current policy file.

Unfortunately this doesn't work as planned. When I specify a security
manage to use on the command line, the policy file isn't automatically
loaded into it (unlike the case where you define the property, but do not
assign a specific security manager).

I would like it to behave exactly as it does when the property is
defined, but not given a value, but instead of using the default
SecurityManager class, to use mine instead.

I looked at the SecurityManager class to see if there was a way to load
the policy, but I just don't see where it goes.

Any assistance would be greatly appreciated.

Thanks!

--
Kenneth P. Turvey <evoturvey@gmail.com>