🚀 go-pugleaf

John:

Does it work if you've got those resources naked?  I remember having 
problems with URL handling with an HTTPS app -- it just didn't like the 
special format indicating that the data came from a jar file.

-Rich

John McGrath [TeamB] wrote:

>I am having a problem with security in Java 1.4.
>
>I have an application that is loaded from two different JAR files
>(Main and Library).  Both load resources from within their own
>JAR file using the Class getResourceAsStream() method.  If I do
>not install a SecurityManager, the resources load properly.  But
>when I install an RMISecurityManager, the code in the Library JAR
>file fails to load the resources - getResourceAsStream() returns
>null.
>
>According to the "Java Security Architecture" (http://java.sun.com
>/j2se/1.3/docs/guide/security/spec/security-spec.doc3.html):
>
>   code always automatically has permission to read files from
>   its same (URL) location, and subdirectories of that location;
>   it does not need explicit permission to do so.
>   
>I thought this means code should always be able to load a
>resource from its own JAR file.  Did I miss something here?
>
>  
>