Download the JDK
Search the Tutorials
Hide the TOC
Trail: Security Features in Java SE
Lesson: Implementing Your Own Permission
Section: Putting It All Together
Implementing Your Own Permission
TerrysGame
The HighScore Class
The HighScorePermission Class
A Sample Policy File
Putting It All Together
Steps for the HighScore Developer (Chris)
Steps for the TerrysGame Developer (Terry)
Steps for a User Running TerrysGame (Kim)
Home Page > Security Features in Java SE > Implementing Your Own Permission
« Previous • Trail • Next »
Steps for a User Running TerrysGame (Kim)

> The steps a user, such as Kim, would take, are:

### Import the Certificates as Trusted Certificates

>     keytool -import -alias chris -file Chris.cer -keystore kim.keystore
>     keytool -import -alias terry -file Terry.cer -keystore kim.keystore

### Set Up a Policy File With the Required Permissions

> Here's the complete kim.policy policy file, as described in A Sample Policy File.

### Run TerrysGame

> To set the high score:

> >     java -Djava.security.manager -Djava.security.policy=kim.policy
> >      -classpath hs.jar;terry.jar com.gamedev.games.TerrysGame set 456

> To get the high score:

> >     java -Djava.security.manager -Djava.security.policy=kim.policy
> >      -classpath hs.jar;terry.jar com.gamedev.games.TerrysGame get

> Notes:
> - If you don't specify `-Djava.security.manager`, the application will run unrestricted (policy files and permissions won't be checked).

> - The `-Djava.security.policy=kim.policy` tells where the policy file is. Note: There are other ways of specifying the policy file. For example, you can add an entry in the security properties file that specifies the inclusion of `kim.policy`, as discussed at the end of the See the Policy File Effects lesson.

> - `-classpath hs.jar;terry.jar` specifies the JAR files that contain the class files needed. For Windows, use a semicolon (";") to separate JAR files; for Unix, use a colon (":").

> - The policy file `kim.policy` specifies the keystore `kim.keystore`. Since it does not provide an absolute URL location for the keystore, the keystore is assumed to be in the same directory as the policy file.

« Previous • Trail • Next »
Previous page: Steps for the TerrysGame Developer (Terry)
Next page: End of Trail