Questions tagged [security-policy]

60 questions
21
votes
1 answer

NetFx40_LegacySecurityPolicy in design-time mode

Is there any way to make legacy design-time code execute with NetFx40_LegacySecurityPolicy switched on? More specificaly, is there any way to make DevExpress 8.2 winforms designer work in VisualStudio 2010? I got errors due to this issue and found…
Ilya
  • 565
  • 2
  • 5
  • 13
16
votes
1 answer

"Error with Permissions-Policy header" getting after Chrome update

Getting following error from the console window after updating the chrome to version 88.0.4324.104 Error with Permissions-Policy header: Parse of permission policy failed because of errors reported by strctured header parser. The application…
10
votes
4 answers

How do I set the security.policy file for a specific application from within NetBeans?

I am having a bit of trouble -- a lot actually -- trying to figure out how get NetBeans to read my policy file for a particular application. Please take a look at the below code: public static void main(final String[] args) { …
Mike
  • 1,590
  • 8
  • 27
  • 41
7
votes
1 answer

Creating a hosted CLR AppDomain with full trust permissions including network rights

I need to host the .NET runtime in an unmanaged process. I have code that works to load the runtime via COM and I can load assemblies into the AppDomain and execute code just fine. However, I run into problems with applications that are hosted on a…
Rick Strahl
  • 17,302
  • 14
  • 89
  • 134
5
votes
0 answers

Configure Security Manager for application that does not allow to set security policy

I want to deploy a web application ( app.war) on wildfly server. the web app has its own custom security manager set that does not allow changing java security policy. I am able to deploy the web app successfully. But when accessing it, it throws…
Mukesh Kumar
  • 783
  • 1
  • 9
  • 24
4
votes
0 answers

JDK11, Security policies doesn’t get propagated to ForkJoinPool worker threads

public class S3ButcketTest { public static void main(String args[]) { System.setSecurityManager(new RMISecurityManager()); ForkJoinPool pool = new ForkJoinPool(1); System.out.println("main: "+Policy.getPolicy()); pool.execute(new…
quintin
  • 812
  • 1
  • 10
  • 35
4
votes
1 answer

IE10 with disabled JS executes manually entered `onmousedown`

In IE10 I've disabled JS execution by setting maximum security level (IE11 also affected). Then I add or edit onmousedown attribute on any element on any site (for example, body element on www.google.com).
3
votes
2 answers

Pattern to substitute for MERGE INTO Oracle syntax when not allowed

I have an application that uses the Oracle MERGE INTO... DML statement to update table A to correspond with some of the changes in another table B (table A is a summary of selected parts of table B along with some other info). In a typical merge…
antlersoft
  • 14,636
  • 4
  • 35
  • 55
3
votes
0 answers

Enforcing Java Security Policy based on signedBy

I'm trying to enforce a security policy, giving Java classes signed by a certain signer certain permissions. My security policy file looks as following: // ========== SYSTEM CODE PERMISSIONS ========================================= grant codeBase…
3
votes
0 answers

How set user as Log on as batch in Windows 10 Home version?

I need to set a user as "Log on as batch" to run a program in Task Scheduler. I need to open up the secpol.msc but this program at "Run" does not exist in my windows 10 home version. This only exist in Pro and Enterprise version. Any alternative…
William
  • 5,526
  • 6
  • 20
  • 42
3
votes
1 answer

Is it possible to write an exclusive Java Security policy for the default Security Manager?

I would like to write a java security policy which allows all permissions, except of a specific type. An example might be: app can only read system properties called MY_ACCESSIBLE_SYSTEM_PROP_1 and MY_ACCESSIBLE_SYSTEM_PROP_2 app cannot read any…
Armand
  • 23,463
  • 20
  • 90
  • 119
3
votes
2 answers

Java security policy set from code

Using this bit of code to try and set a policy file: ClassLoader cl= getClass().getClassLoader(); URL policyURL =cl.getResource("res/policy/new_policy.policy"); System.setProperty("java.security.policy", policyURL.toString()); And I get a…
CosminO
  • 5,018
  • 6
  • 28
  • 50
2
votes
0 answers

Is it possible to have a SQL view which doesn't take into account the security policy?

[Azure SQL] I have a table1 and a security policy with filter predicate (users see only their own rows). Can there be a view1 which will summarize all the table1 info by all the users? I can apply a different security policy on the view for a…
Vlad
  • 21
  • 4
2
votes
1 answer

How to handle AccessControlException with ProtectionDomain null

In a somewhat old and complex Swing application, we have a custom security manager and policy apparently designed to allow everything: /* * allow everything ... */ grant codeBase "file:${{java.ext.dirs}}/*" { permission…
Hans
  • 2,419
  • 2
  • 30
  • 37
2
votes
1 answer

Meaning of Java.net.SocketPermission error when downloading an applet

When downloading an applet on a remote client I see the following error message displayed in the Sun Java Console: java.security.policy: error adding Permission,java.net.SocketPermission: java.lang.IllegalArgumentException: invalid permission:…
Elliott
  • 5,523
  • 10
  • 48
  • 87
1
2 3 4