Problems with Java Security Manager

Hi All,

Can someone check my reasoning here? I am having difficulty with the Java Security Manager. I am encountering the following 2 exceptions with some of my servlets :

I am running :
 
Tomcat 4.1
Apache/1.3.33 (Win32)
mod_jk/1.2.8
JRE Version 1.4.2_03

I have enabled security manager logging using the following Java option (I've set this in the configuration dialogue box for Tomcat as I'm running Tomcat as a service on NT)

set CATALINA_OPTS=-Djava.security.debug=access,failure



Exception #1 (generated when using RMI):

access: access allowed (java.util.PropertyPermission java.rmi.server.hostname read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.connectionTimeout read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.tcp.handshakeTimeout read)
access: access allowed (java.util.PropertyPermission sun.rmi.transport.tcp.responseTimeout read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.io.FilePermission C:\Tomcat41\server\lib\tomcat-util.jar read)
access: access allowed (java.util.PropertyPermission socksProxyHost read)
access: access denied (java.net.SocketPermission XX.XX.XX resolve)


Exception #2 :

java.security.AccessControlException: access denied (java.util.PropertyPermission catalina.base read)




I presume that the above 2 exceptions are generated by the Java Security Manager. I have tried the following in my
catalina.policy file

grant codeBase "file:${catalina.home}/webapps/mywebapp/-" {
  permission java.security.AllPermission;
};

but it makes no difference.


Also, I am wondering why catalina.base should have a problem reading files (I am running Tomcat as Administrator)

These problems are happening in the test environment, but on the live system there are no such exceptions being generated. I can't figure out why this should be the case as the java.policy and catalina.policy files in the Catalina.home/conf directory are identical for both live and test environments.

Does anybody know how to disable the Security Manager for Tomcat when running as a service in NT or is it disabled by default?


Many thanks in advance,
Jonathan O'Donovan