Permission problem reading local XML file

Hi,

I am using the following in an applet:

Document doc;
try
{
    // Create a builder factory.
    DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
    factory.setValidating(false); // nah.
                  
    // Create the builder and parse the file.
    doc = factory.newDocumentBuilder().parse(new File("test01.xml"));
}

The file is test01.xml. I'm sure it exists in the same folder as my applet. When I run the applet, the java console prints out:


Exception in thread "AWT-EventQueue-27" java.security.AccessControlException: access denied (java.util.PropertyPermission user.dir read)
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
      at java.lang.System.getProperty(Unknown Source)
      at java.io.Win32FileSystem.getUserPath(Unknown Source)
      at java.io.Win32FileSystem.resolve(Unknown Source)
      at java.io.File.getAbsolutePath(Unknown Source)
      at javax.xml.parsers.DocumentBuilder.parse(Unknown Source)
      at Gallery.BuildFromXML(Gallery.java:41)
      at MarkGallery.renderInit(MarkGallery.java:45)
      at MarkGallery.render(MarkGallery.java:35)
      at BufferedApplet.update(BufferedApplet.java:57)
      at sun.awt.RepaintArea.updateComponent(Unknown Source)
      at sun.awt.RepaintArea.paint(Unknown Source)
      at sun.awt.windows.WComponentPeer.handleEvent(Unknown Source)
      at java.awt.Component.dispatchEventImpl(Unknown Source)
      at java.awt.Container.dispatchEventImpl(Unknown Source)
      at java.awt.Component.dispatchEvent(Unknown Source)
      at java.awt.EventQueue.dispatchEvent(Unknown Source)
      at java.awt.EventDispatchThread.pumpOneEventForHierarchy(Unknown Source)
      at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
      at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
      at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
      at java.awt.EventDispatchThread.run(Unknown Source)


The same exact code works fine from a 'comman line' java application, reading text01.xml locally in the same folder. Any idea what I did wrong?

Thanks
DJ_AM_JuiceboxAsked:
Who is Participating?
 
objectsConnect With a Mentor Commented:
> should still be valid right?

yes
0
 
objectsCommented:
applets run inside a security sandbox which prevents access to the local disk
you need to sign the applet to access local disk
0
 
objectsCommented:
Or you could put the xml on the server and load it from there

0
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

 
objectsCommented:

eg.
    doc = factory.newDocumentBuilder().parse(getClass().getResourceAsStream("test01.xml"));

or

    URL xml = new URL(applet.getCodeBase(), "test01.xml");
    doc = factory.newDocumentBuilder().parse(xml.toString());
0
 
DJ_AM_JuiceboxAuthor Commented:
yeah it is running from the local server, in this case it happens to be the local directory of my desktop folder:

desktop/my_progject/index.html    // contains the applet
desktop/my_project/test01.xml   // the xml file
desktop/my_project/theapp.class  // the compiled java class file

so I'm just running it locally. I've done this plenty of times with bitmaps etc (this even worked via the command line version of the XML reader) but for some reason it doesn't like running the applet locally!
0
 
DJ_AM_JuiceboxAuthor Commented:
Hmm switching to:

doc = factory.newDocumentBuilder().parse(getClass().getResourceAsStream("test01.xml"));

seemed to work.

Crazy!

Thanks
0
 
objectsCommented:
doesn't matter that you're running locally, sandbox still applies.
The code you are using attempt to access local disk which an unsigned applet is not permitted to do.

0
 
DJ_AM_JuiceboxAuthor Commented:
ahh before I leave this question - once I upload all this stuff and run it from my server (the XML file will also be sitting locally on the server in the same folder as the applet) the:

     parse(getClass().getResourceAsStream("test01.xml"));

should still be valid right?

Thanks
0
 
objectsCommented:
> Crazy!

not really, now you're reading it from the server instead of local disk.
(In your case they just happen to be the same place)


following covers signing applets if you need to go down that route.

http://mindprod.com/jgloss/signedapplets.html
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.