[cobalt-developers] tomcat.policy for individual site

["Diana Saunders" <toodi4@xxxxxxxxxxx>]

I want to grant permissions for one site so that its java app can write to a 
directory within that site.

I understand that I can create a tomcat.policy.www.domainname.com file for 
the individual site.  However, since I am not all that familiar with the 
permissions system, I want to make sure that I don't grant too much in 
permissions.  The one example given in the update manual for the site 
tomcat.policy file is:

permission java.security.AllPermission;

I'm just a little concerned that this permission goes beyond what I'm trying 
to do.  Does the above statement only grant permissions within the site, or 
is this giving that site's servlets permissions full access to the entire 
file system (as was the case before the security update)



_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com