function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
ttrieuttrieu 

security issues with applet in an scontrol

Hi,

  Could you give me a handle on the security issue I'm encountering with the following command:

SoapBindingStub binding =(SoapBindingStub) new SforceServiceLocator().getSoap(new URL(this.getParameter("serverURL")));

The applet runs smoothy through debug mode (which grants all permissions).  But when I run the applet through my browser (IE), it uses another security file that causes the following exception:

java.lang.ExceptionInInitializerError

 at org.apache.commons.discovery.jdk.JDKHooks.<clinit>(JDKHooks.java:75)

 at org.apache.commons.discovery.tools.DiscoverSingleton.find(DiscoverSingleton.java:412)

 at org.apache.commons.discovery.tools.DiscoverSingleton.find(DiscoverSingleton.java:378)

 at org.apache.axis.components.logger.LogFactory$1.run(LogFactory.java:84)

 at java.security.AccessController.doPrivileged(Native Method)

 at org.apache.axis.components.logger.LogFactory.getLogFactory(LogFactory.java:80)

 at org.apache.axis.components.logger.LogFactory.<clinit>(LogFactory.java:72)

 at org.apache.axis.handlers.BasicHandler.<clinit>(BasicHandler.java:81)

 at org.apache.axis.client.Service.getAxisClient(Service.java:143)

 at org.apache.axis.client.Service.<init>(Service.java:152)

 at com.sforce.soap.enterprise.SforceServiceLocator.<init>(SforceServiceLocator.java:10)

Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission createClassLoader)

 at java.security.AccessControlContext.checkPermission(Unknown Source)

 at java.security.AccessController.checkPermission(Unknown Source)

 at java.lang.SecurityManager.checkPermission(Unknown Source)

 at java.lang.SecurityManager.checkCreateClassLoader(Unknown Source)

 at java.lang.ClassLoader.<init>(Unknown Source)

 at org.apache.commons.discovery.jdk.PsuedoSystemClassLoader.<init>(PsuedoSystemClassLoader.java:73)

 at org.apache.commons.discovery.jdk.JDK12Hooks.findSystemClassLoader(JDK12Hooks.java:215)

 at org.apache.commons.discovery.jdk.JDK12Hooks.<clinit>(JDK12Hooks.java:73)

 ... 23 more

 

Any suggestions to overcome this issue?

And just out of curiosity, is there official documentation this scontrol stuff? 

Thanks,

Tan

adamgadamg
You need to sign the applet. (Axis does class loading that the standard security model doesn't like.)