Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027811

Security exception is thrown even if we confirm to run applets with all permissions.

XMLWordPrintable

      Steps to reproduce:
      1. Install the latest 8 nightly (#645) on win7-x86
      2. Import cert http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/UserDecisionPersistence/lib/validcert.cert to deployment trusted Signer CA store so the applets will be regarded as CA-signed.
      3. Open http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/UserDecisionPersistence/html/testMulitpleCASignedApplets.html
      4. There will be a CA-Signed security dialog asking for "unrestricted access", accept it.
      5. If you see following exception in java console, then the issue is reproduced.
      ===========
      java.security.AccessControlException: access denied ("java.util.PropertyPermission" "user.home" "read")
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at sun.plugin2.applet.AWTAppletSecurityManager.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
      at java.lang.System.getProperty(Unknown Source)
      at HelloWorldApplet$1.run(HelloWorldApplet.java:26)
      at java.awt.event.InvocationEvent.dispatch(Unknown Source)
      at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
      at java.awt.EventQueue.access$400(Unknown Source)
      at java.awt.EventQueue$3.run(Unknown Source)
      at java.awt.EventQueue$3.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown Source)
      at java.awt.EventQueue.dispatchEvent(Unknown Source)
      at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
      at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
      at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
      at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
      at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
      at java.awt.EventDispatchThread.run(Unknown Source)
      ===================

      Note
      1. java source code is: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/UserDecisionPersistence/src/HelloWorldApplet.java
      2. There's some java.lang.NoClassDefFoundError: deploy/sqe/drivers/ResultSender in trace, ignore them. They are part of sqe automation driver, not related to the testing purpose here.

            herrick Andy Herrick (Inactive)
            stephenh Stephen Hu (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: