Jeroen De Schutter

Well, id did sign the applet. I was able to write a (temporary) file to the disk of the client machine but when I tried to upload the file using Apache HttpClient, i did get an AccessControlException.

Exception in thread "AWT-EventQueue-2" java.security.AccessControlException: access denied (java.io.FilePermission tempfile.jpeg read) at java.security.AccessControlContext.checkPermission(Unknown Source) at java.security.AccessController.checkPermission(Unknown Source) at java.lang.SecurityManager.checkPermission(Unknown Source) at java.lang.SecurityManager.checkRead(Unknown Source) at java.io.File.isFile(Unknown Source) at org.apache.commons.httpclient.methods.multipart.FilePartSource.<init>(FilePartSource.java:67) at org.apache.commons.httpclient.methods.multipart.FilePart.<init>(FilePart.java:126) at test.PasteImagePanel$5.actionPerformed(PasteImagePanel.java:149)

This is an excerpt of my code

BufferedImage saveImage; // more irrelevant code for processing the image File tempFile = new File("tempfile.jpeg"); try { ImageIO.write(saveImage, "jpeg", tempFile); // Added this output lines to make sure I could read and write to the file. // It returned 'true' for both cases System.out.println(" tempFile.canRead() : " + tempFile.canRead()); System.out.println(" tempFile.canWrite() : " + tempFile.canWrite()); PostMethod filePost = new PostMethod(props.getProperty("createDocumentURL")); Part[] parts = { new FilePart("file-nl", tempFile) }; filePost.setRequestEntity(new MultipartRequestEntity(parts, filePost.getParams())); filePost.setRequestHeader("Cookie", props.getProperty("cookie")); HttpClient client = new HttpClient(); int status = client.executeMethod(filePost);

Hi there,

I'm bumping this topic because I encountered exactly the same security issue as described in the first post of this topic. I am also developping an applet which enables to upload image files from a local machine to a Struts application.

I don't quite understand why I should change the permissions in the policy files. When I am going to deploy this applet to our users, do they have to change their policy files on their local machines too ? Is there no other solution ?

Executing the clearRect() method seems to be the solution. Thanks a lot !

I am afraid in don't quite understand how imaging in Java works ...
I am storing thumbnails of image files in a database. The thumbnails are always in JPEG format. When i want to store images with transparency (GIFs or PNGs) the "background color" of the alpha channel is always rendered black in the JPEG. I'd like it to become white, but I have no idea how.

I have already tried to set the background color of the Graphics2D object to white, but without visble results.

This is my code

BufferedImage vBi = null; vBi = ImageIO.read(pImageInputStream); // <= This is the InputStream from the original image file int vType = vBi.getType(); if (vType == BufferedImage.TYPE_CUSTOM) // png images have a "custom" type, which causes trouble ! { vType = BufferedImage.TYPE_3BYTE_BGR; } BufferedImage vThumb = new BufferedImage(128, 128, vType); Graphics2D vG2d = vThumb.createGraphics(); vG2d.drawImage(vBi, 0, 0, 128, 128, null); ByteArrayOutputStream vBAOS = new ByteArrayOutputStream(); boolean result = ImageIO.write(vThumb, "jpeg", vBAOS);
Please note that my app runs on OC4J 10.1.2, so i'm limited to JDK 1.4