Required Permissions for the Java 2 Platform

Using the JDBC Client on a Java 2 Platform with the Standard Security Manager enabled requires certain permissions to be set in the security policy file of the Java 2 Platform. This security policy file can be found in the jre/lib/security subdirectory of the Java 2 Platform installation directory.

Note: Web browser applets running in the Java 2 plug-in are always running in a JVM with the standard Security Manager enabled.

To run an application on a Java 2 Platform with the standard Security Manager, use the following command:

"java -Djava.security.manager application_class_name"

where application_class_name is the class name of the application.

Refer to your Java 2 Platform documentation for more information about setting permissions in the security policy file.

To use JDBC data sources, all code bases must have the following permissions:

// permissions granted to all domains
grant {
// DataSource access
permission java.util.PropertyPermission "java.naming.*", "read,write";
// Adjust the server host specification for your environment
permission java.net.socketPermission "*.ddtek.be:0-65535", "connect";
};

To use scroll-insensitive scrollable cursors, all code bases must have access to temporary files:

// permissions granted to all domains
grant {
// Permission to create and delete temporary files.
// Adjust the temporary directory for your environment.
permission java.io.FilePermission "C:\\TEMP\\-", "read,write,delete";
};

To use SSL, the following permissions are required for the JDBC Client code base only:

// permissions granted to the OpenAccess JDBC Client code base only
grant codeBase "file:/slje/lib/-" {
// Security providers
// Only needed when using SSL
};

Applets that connect to another server other than the one they are downloaded from must have the following permission:

// permissions granted to the OpenAccess JDBC Client code base only
grant codeBase "file:/slje/lib/-" {
// TCP/IP
 
// Adjust the server host specification for your environment
permission java.net.SocketPermission "*.ddtek.be:0-65535", "connect";
};

Notes:

• Make sure that you adjust the code base of the JDBC Client for your environment. For an applet, this will probably start with http:// or https://.
• Make sure that you adjust the server host specification and location of temporary files for your environment.