Bug 108940 - SecurityManager throws AccessControlException without asking
Summary: SecurityManager throws AccessControlException without asking
Status: RESOLVED DUPLICATE of bug 65602
Alias: None
Product: konqueror
Classification: Applications
Component: kjava (show other bugs)
Version: unspecified
Platform: openSUSE Linux
: NOR normal
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-07-11 19:31 UTC by Christoph Tornau
Modified: 2005-07-25 23:54 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christoph Tornau 2005-07-11 19:31:21 UTC
Version:            (using KDE KDE 3.4.0)
Installed from:    SuSE RPMs
OS:                Linux

When using the securtyManager for signed applets the securityManager asks for access permission for some events which are happening on the file system. This is done by the user interface. You can give access permissions by clicking on the right buttons. 

Our applet opens a simply java fileSelection dialog. Now a AccessControlException is thrown by it without questioning the user. So no file list is displayed by the dialog.

There are also some other AccessControlExceptions which are thrown without questioning:

When you use the applet at http://www.radinks.com/upload/applet.php you will get the following exception:

java.security.AccessControlException: access denied (java.awt.AWTPermission accessClipboard)
	at java.security.AccessControlContext.checkPermission(AccessControlContext.java:269)
	at java.security.AccessController.checkPermission(AccessController.java:401)
	at java.lang.SecurityManager.checkPermission(SecurityManager.java:524)
	at org.kde.kjas.server.KJASSecurityManager.checkPermission(KJASSecurityManager.java:64)
	at java.lang.SecurityManager.checkSystemClipboardAccess(SecurityManager.java:1368)
	at sun.awt.motif.MToolkit.getSystemClipboard(MToolkit.java:438)
	at u.paste(Unknown Source)
	at l.actionPerformed(Unknown Source)
	at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:1786)
	at javax.swing.AbstractButton$ForwardActionEvents.actionPerformed(AbstractButton.java:1839)
	at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:420)
	at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:258)
	at javax.swing.AbstractButton.doClick(AbstractButton.java:289)
	at javax.swing.plaf.basic.BasicMenuItemUI.doClick(BasicMenuItemUI.java:1113)
	at javax.swing.plaf.basic.BasicMenuItemUI$MouseInputHandler.mouseReleased(BasicMenuItemUI.java:943)
	at java.awt.Component.processMouseEvent(Component.java:5100)
	at java.awt.Component.processEvent(Component.java:4897)
	at java.awt.Container.processEvent(Container.java:1569)
	at java.awt.Component.dispatchEventImpl(Component.java:3615)
	at java.awt.Container.dispatchEventImpl(Container.java:1627)
	at java.awt.Component.dispatchEvent(Component.java:3477)
	at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:3483)
	at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3198)
	at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3128)
	at java.awt.Container.dispatchEventImpl(Container.java:1613)
	at java.awt.Component.dispatchEvent(Component.java:3477)
	at java.awt.EventQueue.dispatchEvent(EventQueue.java:456)
	at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:201)
	at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:151)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:145)
	at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:137)
	at java.awt.EventDispatchThread.run(EventDispatchThread.java:100)


It seems that the list of access types in the security manager is incomplete.


If you disable the SecurityManager everything works fine. If you use Firefox everything works fine with the applet, too.
Comment 1 Koos Vriezen 2005-07-25 23:54:52 UTC
Yes, this is still incomplete indeed. IMO first the chain of certificates should work properly to continue with this.
Unfortunately, I'm not into that stuff ATM. I've ask for help, but no one offered any until now :(

*** This bug has been marked as a duplicate of 65602 ***