🚀 go-pugleaf

Jeff,

The policy files have to reside on the client machine not on the server. This is
simply because the users on the client machine determine who and what has access
to the local system resources.

There are two levels of security files: user policy files and system policy
files. In JDK1.2/JRE1.2 user policy files reside in the users home directory
(UNIX: the user's home directory, Windows NT: c:\winnt\profiles\<username>).
System policy files reside in jre1.2/lib/security. I don't know right now where
the browers search for the policy files because they have their own JVM.

Rudi


Jeff Rafter wrote:

> Reading the JDC book
> (http://developer.java.sun.com/developer/onlineTraining/JDCBook/appA.html) I
> think I have pretty much figured out why connections get refused.  They need
> a policy file that gives permissions to a SocketServer or Socket.  When
> running in a browser where does the Policy file need to be though?  On the
> Server itself?
>
> The book reads :
>
> >> When running an applet in a browser, the browser looks for the user and
> system
> >> policy files to find the permissions the applet needs to access local
> system
> >> resources on behalf of the user who downloaded the applet
>
> Can anyone shed some light on this?
>
> Thanks,
> Jeff Rafter
> Realsoft Development