Re: Policy files

2013-04-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Christian, On 4/24/13 11:25 PM, Christian Beikov wrote: > Well I understand that there is only one SecurityManager per JVM, > but as you mentioned I can restrict actions for specific CodeBases. > This is what I am actually trying to do. I want the s

Re: Policy files

2013-04-25 Thread Shanti Suresh
Hi Christian, On Wed, Apr 24, 2013 at 11:25 PM, Christian Beikov < christian.bei...@gmail.com> wrote: > > > I just don't want to have these applications running on my computer not > knowing what they actually do. To be honest I couldn't think of any > permission I would give a student applicatio

Re: Policy files

2013-04-24 Thread Christian Beikov
Well I understand that there is only one SecurityManager per JVM, but as you mentioned I can restrict actions for specific CodeBases. This is what I am actually trying to do. I want the student web applications to have only a hand full of permissions defined in a policy file. I think I explaine

Re: Policy files

2013-04-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Christian, On 4/24/13 1:51 PM, Christian Beikov wrote: > Yes we are talking about security manager policies. Good :) There's a lot about Spring that I don't know about, so I was just checking that you weren't talking about some crazy IoC thing or

Re: Policy files

2013-04-24 Thread Christian Beikov
Yes we are talking about security manager policies. So there is no possibility to just push the policy file to the WebappClassLoader? As stated in the reply to Matrin Gainty there do exist methods to restrict the webapp, but unfortunately no method for supplying a policy file. So this means

Fwd: Re: Policy files

2013-04-24 Thread Christian Beikov
Accidently mailed on tomee-list before >< Thanks for the quick answer but it seems I didn't explain my situation completely. We use Maven for all assignments, I can control what base project they have to use for a specific assignment. Also in my testsuite I automatically build these projects a

Re: Policy files

2013-04-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Christian, On 4/24/13 2:29 AM, Christian Beikov wrote: > I am using tomcat as an embedded container for a while now, it is > really amazing, but now I got stuck on a topic. I am implementing a > testsuite for automatic testing of uploaded solutions