Release 10.1A: OpenEdge Development:
Java Open Clients

Asking for permission in Netscape version 6

Asking for permissions in Netscape version 6 or when using a Java plug-in in your Microsoft Internet Explorer requires that you change the Java 2 security policy. The Java 2 security policy file is located in the JRE’s lib\security subdirectory. It might be combined with a per-user policy file located in the user’s home directory.

The JRE’s file is named java.policy, and the version in a user’s home directory is named .java.policy. Changing the JRE policy file grants permissions to every user on the system, while changing the policy file in a user’s home directory affects only that user. Progress Software Corporation recommends changing the user’s home directory on individual machines. For more information about Java 2 security policy files, refer to the Java 2 Security guides.

To support HTTP and HTTPS, the Open Client applet requires additional network connection privileges. The Java permission is named java.net.SocketPermission, and it takes these arguments:

The fully qualified DNS address and port (usually port 80) of the Web server for the AppServer Internet Adapter (AIA).
The network actions connect,resolve.

The full entry is:

permission java.net.SocketPermission host:80, connect,resolve

When using HTTPS in your Open Client applet, you also might need an additional Java permission to read the root digital certificate files, to validate the identity of the Web server for the AIA. If this is the case, you must add file read permissions that provide full read ability. The following shows the entry:

permission java.io.FilePermission *, read;

The Java permissions should be placed in the Java 2 policy file grant blocks. One permission grants access to only your Open Client applet code; the other permission, to only the Open Client Runtime.

The following shows some sample code for these permission grants:

grant codebase http://applicationhost.acme.com/aia/jars-{ permission java.net.SocketPermission https://aia.acme.com/aia/Aia1:443,connet,resolve; permission java.io.FilePermission *,read; }; grant codebase http://applicationhost.acme.com/aia/applets/-{ permission java.net.SocketPermission *, read; };

In this sample:

The o4glrthsl.jar runtime and root digital certificates are located in the applicationhost Web server’s aia/jar path.
The Open Client applet is located in the applicationhost Web server’s aia/applets path.
The AIA is located in the AIA Web server’s aia/Aia1 path.