Security

When designing your application, you have to decide whether it runs in an unrestricted environment or not. The security mechanism adopted in JNLP resembles the applet's. If your code is not signed, your program will run in a restricted environment (also known as a sandbox); otherwise, it will have access at all the resources. A third modality can be set using the security element switched to the so-called J2EE application client environment security value.

We will examine the differences of these modalities, but before we get into details, let's have a look at the most commonly used permissions. In Table 10.1, Yes means that the action is always allowed, whereas No means that is never allowed. Ask User means that the JNLP Client presents ...

Get Java™ Deployment with JNLP™ and Webstart™ now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.