WebStart security issue

[Strannik]

I'm migrating to WebStart technology right now but has some security problems.
When I'm trying to retrieve some properties from jnlp file:
String s = System.getProperty("codebase");
it raises exception:"access denied(java.util.PropertyPermission codebase read".

Is there any way to avoid this if not signing jar-files ?

 

[LAMski]

You need to sign ALL your jar files. Even the libraries that your application uses. The webstart-ed application basically has a more lenient security restrictions than an applet. You can consult the webstart documentation for more info. If you've downloaded the J2SE documentation, it should be in the docs\guide\jws folder.

Hope this helps.

 

[Strannik]

to LAMSki:

Thanks.I've already used signed applet. I asked because WebStart proposed different security policy than browser did ...