wood burning stoves 2.0*
The moose likes Developer Certification (SCJD/OCMJD) and the fly likes Do I really need a security policy? Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Certification » Developer Certification (SCJD/OCMJD)
Bookmark "Do I really need a security policy?" Watch "Do I really need a security policy?" New topic

Do I really need a security policy?

Charley Zuo

Joined: Jan 10, 2002
Posts: 4
I saw some people using security policy which grants all permissions. I am just wondering if this is really necessary. Since if the application is running without a security manager, there is no requirement to establish permissions for that application. By default, the application has full access to all resources. Also, by default, an RMI program does not have a security manager installed, and no restrictions are placed on remotely loaded objects.
Did I miss something?
Mark Spritzler

Joined: Feb 05, 2001
Posts: 17249

For the assignment I only used security on the client. Not really necessary, but just shows the assessor you understand how to use it, even though in our cases we grant all access.

Perfect World Programming, LLC - Two Laptop Bag - Tube Organizer
How to Ask Questions the Smart Way FAQ
Charley Zuo

Joined: Jan 10, 2002
Posts: 4
Thanks for your reply. So I suppose they won't take points off if I don't use security manager in my assignment, since there is no requirement in the documentation. If anyone knows it is not true, please advise. Thanks.
I agree. Here's the link: http://aspose.com/file-tools
subject: Do I really need a security policy?
Similar Threads
RMI Port Number
MultiPartRequest Servlet & Security
how do we deploy app with security manager to clients?
Custom Policy, Security Manager? Best approaches?
Probably a stupid question, the benefit of policy files?