Infrastructure

The MN tester fails with the defaul installation with a java security error:

java.security.AccessControlException: access denied (java.util.PropertyPermission context.mn.baseurl write)

Adding to /etc/tomcat6/policy.d/04webapps.policy

grant {
...
// d1_integration web testing needs to be able to set context with this property
permission java.util.PropertyPermission "context.mn.baseurl", "read, write, delete";
};

Fails with the same error message.

This solution works:

grant codeBase "file:/var/lib/tomcat6/webapps/d1_integration-0.6.2-SNAPSHOT/-" {
//permission java.io.FilePermission "/var/lib/tomcat6/webapps/d1_integration-0.6.2-SNAPSHOT/-", "read, write, delete";
//permission java.util.PropertyPermission "context.mn.baseurl", "read, write, delete";
permission java.security.AllPermission;
};

though is unsatisfactory as it grants AllPermissions to the app.

What are the permissions required for the application, and how should java security be appropriately configured?