file access in jythonc

[John Howard]

I have the following in a jythonc program to be executed in a html
file.

f1 = open("filename" ,"r")

I get message about filePermission read error. Program compiles and
jar file is created. Just the html code gives message.

Any ideas?

[Alan Kennedy]

[John Howard]

I have the following in a jythonc program to be executed in a html
file.

f1 = open("filename" ,"r")

I get message about filePermission read error. Program compiles and
jar file is created. Just the html code gives message.

Any ideas?

I am presuming that when you say "executed in a html file" you mean that
this code is to be embedded in a rendered html page as displayed in a
browser, such as mozilla or ie, which means that your code is an
"applet", and thus allowed to execute only in the "applet sandbox"
inside that browser. Which significantly restricts the access rights of
the applet to access system resources such as local files, for a range
of very good security reasons, described here

http://java.sun.com/docs/books/tutor.../security.html
http://java.sun.com/docs/books/tutor...y1.2/overview/

You can approach the problem by

1. Digitally signing your applet or jar file.
http://www.jguru.com/faq/view.jsp?EID=11475

2. Configuring the your browser to permit file access to local files
(potentially opening a massive security hole in your browser).
http://www.developer.com/java/ent/article.php/630621

HTH,

--
alan kennedy
------------------------------------------------------
email alan: http://xhaus.com/contact/alan

[John Howard]

Alan Kennedy <al****@hotmail .com> wrote in message news:<MQ******* ***********@new s.indigo.ie>...

[John Howard]

I have the following in a jythonc program to be executed in a html
file.

f1 = open("filename" ,"r")

I get message about filePermission read error. Program compiles and
jar file is created. Just the html code gives message.

Any ideas?

I am presuming that when you say "executed in a html file" you mean that
this code is to be embedded in a rendered html page as displayed in a
browser, such as mozilla or ie, which means that your code is an
"applet", and thus allowed to execute only in the "applet sandbox"
inside that browser. Which significantly restricts the access rights of
the applet to access system resources such as local files, for a range
of very good security reasons, described here

http://java.sun.com/docs/books/tutor.../security.html
http://java.sun.com/docs/books/tutor...y1.2/overview/

You can approach the problem by

1. Digitally signing your applet or jar file.
http://www.jguru.com/faq/view.jsp?EID=11475

2. Configuring the your browser to permit file access to local files
(potentially opening a massive security hole in your browser).
http://www.developer.com/java/ent/article.php/630621

HTH,

Yes, you are correct. I do want to execute in html page. I need read
access only for a file that is already there from another source. It's
unclear to me exactly where the filepermission code goes. In the
jython program? I looked at my ie parameters and saw no place to
change access to files. I did a search in altavista on FilePermission
and it looks like a lot of others also have questions. Can this even
be done with jythonc? It seems to me that being able to do so opens up
many, many possibilities for useful code!

[John Howard]

py*******@yahoo .com (John Howard) wrote in message news:<9e******* *************** ***@posting.goo gle.com>...

I have the following in a jythonc program to be executed in a html
file.

f1 = open("filename" ,"r")

I get message about filePermission read error. Program compiles and
jar file is created. Just the html code gives message.

Any ideas?

I've looked up the references below and done several searches of
filepermissions . It seems to me that for jythonc to have any use in
development of "practical" products, programs have to be able to
access local files easily. If not, then this, in my opinion, is going
to be a MAJOR issue for jython!! I love the syntax and ease of
programming in python, but if it cannot be used for useful programs,
why bother?! BTW, how does java handle this? Is the same problem there
also?

[Diez B. Roggisch]

> I've looked up the references below and done several searches of

filepermissions . It seems to me that for jythonc to have any use in
development of "practical" products, programs have to be able to
access local files easily. If not, then this, in my opinion, is going
to be a MAJOR issue for jython!! I love the syntax and ease of
programming in python, but if it cannot be used for useful programs,
why bother?! BTW, how does java handle this? Is the same problem there
also?

Don't blame jython for things it hasn't to do with - as Alan said, java puts
restrictions on the things an applet can do. That restrictions can be
relaxed by signing the applet - go search google for stuff like java,
applet, signing, local, file, access.

A common mistake for jython users is to think that there must be special
jython related documentation for their problems - but usually its not, for
the simple reason that there are tons of docs on java out there. Jython
docs only cover the differences. So go look for java solutions to your
problems, and then feel the joy of using java-classes with a language
without checked exceptions and what not that makes coding in java so ...
verbose.
--
Regards,

Diez B. Roggisch

[John Howard]

"Diez B. Roggisch" <de*********@we b.de> wrote in message news:<ch******* ******@news.t-online.com>...

I've looked up the references below and done several searches of
filepermissions . It seems to me that for jythonc to have any use in
development of "practical" products, programs have to be able to
access local files easily. If not, then this, in my opinion, is going
to be a MAJOR issue for jython!! I love the syntax and ease of
programming in python, but if it cannot be used for useful programs,
why bother?! BTW, how does java handle this? Is the same problem there
also?

Don't blame jython for things it hasn't to do with - as Alan said, java puts
restrictions on the things an applet can do. That restrictions can be
relaxed by signing the applet - go search google for stuff like java,
applet, signing, local, file, access.

A common mistake for jython users is to think that there must be special
jython related documentation for their problems - but usually its not, for
the simple reason that there are tons of docs on java out there. Jython
docs only cover the differences. So go look for java solutions to your
problems, and then feel the joy of using java-classes with a language
without checked exceptions and what not that makes coding in java so ...
verbose.

So...are you saying it can be done? That is, a IE can access a local
file (assuming it's there, of course) using a jythonc product?
Question is -- HOW???

[Diez B. Roggisch]

> So...are you saying it can be done? That is, a IE can access a local

file (assuming it's there, of course) using a jythonc product?
Question is -- HOW???

As I said - search google for JAVA APPLETS ACCESSING LOCAL FILES - then you
can do that using jython. As a matter of fact, the whole process has to do
with signing jars - nobody cares if these contain classes generated by
javac, jikes, jythonc or carefully handwritten jvm bytecode....

--
Regards,

Diez B. Roggisch

[Neil Benn]

John Howard wrote:

"Diez B. Roggisch" <de*********@we b.de> wrote in message news:<ch******* ******@news.t-online.com>...

I've looked up the references below and done several searches of
filepermissi ons. It seems to me that for jythonc to have any use in
developmen t of "practical" products, programs have to be able to
access local files easily. If not, then this, in my opinion, is going

<snip>
Hello,

The reason that you cannot access local files is for security
reasons. If you could access local files; then what would stop an
applet running the (Jython) command :

os.remove("kern al32.dll")

As the previous responder stated, you will need to understand the
java security model, beneath is a link to the Java Security Tutorial :

http://java.sun.com/docs/books/tutorial/security1.2/

I know that it is a pain the the arse to deal with but imagine what
a disaster it would be if the security wasn't there!

Cheers,

Neil

--

Neil Benn
Senior Automation Engineer
Cenix BioScience
BioInnovations Zentrum
Tatzberg 47
D-01307
Dresden
Germany

Tel : [phone]
e-mail : be**@cenix-bioscience.com
Cenix Website : http://www.cenix-bioscience.com

[John Howard]

"Diez B. Roggisch" <de*********@we b.de> wrote in message news:<ch******* ******@news.t-online.com>...

So...are you saying it can be done? That is, a IE can access a local
file (assuming it's there, of course) using a jythonc product?
Question is -- HOW???

As I said - search google for JAVA APPLETS ACCESSING LOCAL FILES - then you
can do that using jython. As a matter of fact, the whole process has to do
with signing jars - nobody cares if these contain classes generated by
javac, jikes, jythonc or carefully handwritten jvm bytecode....

So does that mean that a jre does not have to be on the local pc? The
local pc does not have to set policies, etc. If that is true, then all
I've said about jython I take back. It is truly useful!

[Alan Kennedy]

[John Howard]

So does that mean that a jre does not have to be on the local pc?
No: there *must* be a JRE on the local PC: how could the java/jython run
at all without an execution environment?

The JRE on the local PC is the very thing that is preventing you from
reading files from local drives.

If you want to, you can permit any and all applet to load files from
your local drive. In Internet Explorer, select
"Tools->Options"->Security->Custom Level->Microsoft VM->Java
Permissions->Custom->Java Custom Settings.

In that control panel you can disable all of the protections that your
browser puts in place to protect you from hostile applets on the
Internet at large. Feel free to dismantle those security barriers, at
your own risk: by doing so you're opening the contents of your hard-disk
to the world. I Hope you're not storing any private or sensitive
information on there.
The local pc does not have to set policies, etc.

No, that's precisely where you set policies. Where else could they be set?

Alternatively, as others have pointed out multiple times, you can
digitally sign your applets so that they can be recognized and thus
given more permissions than unknown applets.

--
alan kennedy
------------------------------------------------------
email alan: http://xhaus.com/contact/alan