grant codeBase "file:-" { // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}lib${file.separator}-", "read"; // Access to rt.jar permission java.io.FilePermission "${java.home}${file.separator}lib${file.separator}rt.jar", "read"; // Access to Tomcat logs (necessary to allow Tomcat to rotate its logs) permission java.io.FilePermission "${catalina.home}${file.separator}logs", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}logs${file.separator}-", "write"; // Database access permissions // actiTIME requires permissions to access an SMTP server to send email notifications. // Please replace <SMTP_HOST> below with name or IP address of your SMTP server. // It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; permission java.util.PropertyPermission "org.apache.tomcat.jdbc.pool.onlyAttemptCurrentClassLoader", "read"; permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "guava.concurrent.generate_cancellation_cause", "read"; // Network and Runtime permissions permission java.net.NetPermission "specifyStreamHandler"; permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.session"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.webresources.http"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.connector"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.core"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; permission java.lang.RuntimePermission "accessClassInPackage.javax.servlet"; permission java.lang.RuntimePermission "accessClassInPackage.sun.misc"; permission java.lang.RuntimePermission "accessClassInPackage.sun.reflect.generics.reflectiveObjects"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool.jmx"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool.interceptor"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.buf"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.coyote"; permission java.lang.RuntimePermission "setContextClassLoader"; // MBean management permission javax.management.MBeanServerPermission "createMBeanServer"; permission javax.management.MBeanPermission "com.actimind.common.jmxmanagement.mxbeans.*", "registerMBean"; permission javax.management.MBeanTrustPermission "register"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "defineClassInPackage.java.lang"; permission java.lang.RuntimePermission "defineClassInPackage.java.util"; };
grant codeBase "file:-" { // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}lib${file.separator}-", "read"; // Access to Tomcat logs (necessary to allow Tomcat to rotate its logs) permission java.io.FilePermission "${catalina.home}${file.separator}logs", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}logs${file.separator}-", "write"; // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER", "read"; permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; permission java.util.PropertyPermission "org.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH", "read"; permission java.util.PropertyPermission "guava.concurrent.generate_cancellation_cause", "read"; // Network and Runtime permissions permission java.net.NetPermission "specifyStreamHandler"; permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.session"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.connector"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.core"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "accessClassInPackage.javax.servlet"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.buf"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.coyote"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool.jmx"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.jdbc.pool.interceptor"; permission java.lang.RuntimePermission "accessClassInPackage.sun.reflect.generics.reflectiveObjects"; permission java.lang.RuntimePermission "setContextClassLoader"; // MBean management permission javax.management.MBeanServerPermission "createMBeanServer"; permission javax.management.MBeanPermission "com.actimind.common.jmxmanagement.mxbeans.*", "registerMBean"; permission javax.management.MBeanTrustPermission "register"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "defineClassInPackage.java.lang"; permission java.lang.RuntimePermission "defineClassInPackage.java.util"; };
grant codeBase "file:-" { // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}lib${file.separator}-", "read"; // Access to Tomcat logs (necessary to allow Tomcat to rotate its logs) permission java.io.FilePermission "${catalina.home}${file.separator}logs", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}logs${file.separator}-", "write"; // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER", "read"; permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; // Network and Runtime permissions permission java.net.NetPermission "specifyStreamHandler"; permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.session"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.connector"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.core"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina.util"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "accessClassInPackage.javax.servlet"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.tomcat.util.buf"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.coyote"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; //File permissions permission java.io.FilePermission "img${file.separator}custom${file.separator}*","read,delete,write"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.catalina"; permission java.lang.RuntimePermission "defineClassInPackage.java.lang"; permission java.lang.RuntimePermission "defineClassInPackage.java.util"; };
grant codeBase "file:-" { // Access to Tomcat logs (necessary to allow Tomcat to rotate its logs) permission java.io.FilePermission "${catalina.home}${file.separator}logs", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}logs${file.separator}-", "write"; // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}server${file.separator}lib${file.separator}-", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}common${file.separator}lib${file.separator}-", "read"; // Access to system properties permission java.util.PropertyPermission "org.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER", "read"; permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; // Network and Runtime permissions permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.jasper.compiler"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; //File permissions permission java.io.FilePermission "img${file.separator}custom${file.separator}*","read,delete,write"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "defineClassInPackage.java.lang"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "defineClassInPackage.java.util"; permission java.lang.RuntimePermission "accessClassInPackage.org.apache.coyote"; };
Please also add the following permission to the existing block "file:${catalina.home}/bin/tomcat-juli.jar" in the
permission java.io.FilePermission "WEB-INF${file.separator}classes${file.separator}logging.properties", "read";
grant codeBase "file:-" { // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}server${file.separator}lib${file.separator}-", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}common${file.separator}lib${file.separator}-", "read"; // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; // Network and Runtime permissions permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; //File permissions permission java.io.FilePermission "img${file.separator}custom${file.separator}*","read,delete,write"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.coyote.http11"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.coyote"; };
grant codeBase "file:-" { // Access to Tomcat libraries permission java.io.FilePermission "${catalina.home}${file.separator}server${file.separator}lib${file.separator}-", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}common${file.separator}lib${file.separator}-", "read"; permission java.io.FilePermission "${catalina.home}${file.separator}lib${file.separator}-", "read"; // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "org.apache.coyote.USE_CUSTOM_STATUS_MSG_IN_HEADER", "read"; permission java.util.PropertyPermission "catalina.home", "read"; permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; // Network and Runtime permissions permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; //File permissions permission java.io.FilePermission "img${file.separator}custom${file.separator}*","read,delete,write"; // Optional permissions that would increase actiTIME performance permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.jasper.runtime"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.coyote.http11"; permission java.lang.RuntimePermission "defineClassInPackage.org.apache.coyote"; };
grant codeBase "file:-" { // Database access permissions //actiTIME requires permissions to access an SMTP server to send email notifications. //Please replace <SMTP_HOST> below with name or IP address of your SMTP server. //It must be equal to the one specified in actiTIME General Settings. permission java.net.SocketPermission "<SMTP_HOST>:25", "connect,resolve"; // Access to system properties permission java.util.PropertyPermission "file.encoding", "read"; permission java.util.PropertyPermission "java.runtime.version", "read"; //File permissions permission java.io.FilePermission "img${file.separator}custom${file.separator}*","read,delete,write"; // Network and Runtime permissions permission java.net.NetPermission "specifyStreamHandler"; permission java.lang.RuntimePermission "getClassLoader"; permission java.lang.RuntimePermission "accessDeclaredMembers"; permission java.lang.RuntimePermission "accessClassInPackage.sun.security.provider"; permission java.lang.RuntimePermission "accessClassInPackage.sun.util.logging.resources"; permission java.lang.RuntimePermission "accessClassInPackage.javax.servlet"; };Return to actiTIME