Re: Java Applets connecting to Databases: access denied (java.net.SocketPermission ... resolve)

From:

=?ISO-8859-1?Q?Arne_Vajh=F8j?= <arne@vajhoej.dk>

Newsgroups:

comp.lang.java.programmer

Date:

Sun, 14 Oct 2007 17:04:10 -0400

Message-ID:

<4712843e$0$90270$14726298@news.sunsite.dk>

carrilho.paulo@gmail.com wrote:

I'm new about developing Java applets and I need some help.

I'm developing a Web Application based on JSPs and Tomcat in Netbeans.

I've also developed a Java Applet which its package has some classes.
This Applet connects to a Sybase Database (JConnect) in order to query
some information. It works fine when I run the Applet Class at
Netbeans.

The Jar containing this Applet (and the Jar supporting the DB driver)
is embedded into a JSP of my Web Application through JSP Plugin tag.

When I call for this JSP (where the Applet is embedded) I get this
error (at the Client Java Console):

java.security.AccessControlException: access denied
(java.net.SocketPermission ... resolve)

An applet can with normal privs only connect to the same host as
it is downloaded from.

You can work around that by signing the applet.

You can do that for an intranet context.

You should not do that for an internet context.

Because everybody can decompile an applet
and read the Sybase username and password used to connect
and it is generally considered bad practice to make a database
server an edge server.

Arne