// Sample fragments you might put in a policy file. // The following requests that the RSA-signature be examined; // that there should be a dialog prompt; // if denied, no privileges; // if granted, full privileges. grant { }; // The following requests that the RSA-signature be ignored; // That the policy file be used; no privileges. grant { permission java.lang.RuntimePermission "usePolicy"; }; // The following requests that for code from mindprod.com, // that the RSA-signature be ignored; // that a policy file be used; // The Applet does not need to be signed at all. Not even a jar is required. // The raw class file could be deployed directly. // that universal-connect privileges be given to code in this codeBase. grant codeBase "http://www.mindprod.com/-" { permission java.lang.RuntimePermission "usePolicy"; permission java.net.SocketPermission "*", "connect"; }; // The following requests that for code from mindprod.com // that the RSA-signature be examined; // there be a dialog prompt; // if denied, only policy file permissions are granted; // if granted, all permissions granted. grant codeBase "http://www.mindprod.com/-" { permission java.net.SocketPermission "*", "connect"; }; // The following grants the code in // the local Opera.jar // the right to do whatever it wants. // Oracle uses file:/C: not file:///C:. I don't know if that is significant. grant codeBase "file:/C:/Program Files/Opera/classes/Opera.jar" { permission java.security.AllPermission; }; // The following grants signed Applets the // the right to use the sun.* classes and the right to read all files. grant { permission java.lang.RuntimePermission "accessClassInPackage.sun.*"; permission java.io.FilePermission "<<all files>>", "read"; }; // The following grants the code in // the ext directory jars // the right to do whatever it wants. grant codeBase "file:${java.home}/lib/ext/*" { permission java.security.AllPermission; };