Signed java applet

[Robert Larsen]

Hi all

I have a small problem with a signed applet.
The applet works fine but some users wont click 'yes' to give the applet
further privileges (that is ok too). If the user dont give the applet
privileges I show a page telling them that the applet wont work unless
they grant the applet privileges and give them a link back to the
original page so that they can try again if they want to.
But if they follow that link, nothing happens...unles s the cache is cleared.

Does the browser (tested with IE and Firefox) remember the original answer ?
I cannot find anything regarding this policy in the applet security FAQ
or any other place.

Will I have to provide two identical applets to overcome this ?

Best
Robert Larsen

[James]

Re: Signed java applet

On Mon, 16 Jun 2008 12:50:13 +0200, Robert Larsen wrote:

Hi all
>
I have a small problem with a signed applet. The applet works fine but
some users wont click 'yes' to give the applet further privileges (that
is ok too). If the user dont give the applet privileges I show a page
telling them that the applet wont work unless they grant the applet
privileges and give them a link back to the original page so that they
can try again if they want to. But if they follow that link, nothing
happens...unles s the cache is cleared.
>
Does the browser (tested with IE and Firefox) remember the original
answer ? I cannot find anything regarding this policy in the applet
security FAQ or any other place.
>
Will I have to provide two identical applets to overcome this ?
>
Best
Robert Larsen

Sounds like you should move some of your code from init() to start().
--
James
*Note: Remove every other letter for correct email address

[Robert Larsen]

Re: Signed java applet

James wrote:

On Mon, 16 Jun 2008 12:50:13 +0200, Robert Larsen wrote:
>

>Hi all
>>
>I have a small problem with a signed applet. The applet works fine but
>some users wont click 'yes' to give the applet further privileges (that
>is ok too). If the user dont give the applet privileges I show a page
>telling them that the applet wont work unless they grant the applet
>privileges and give them a link back to the original page so that they
>can try again if they want to. But if they follow that link, nothing
>happens...unle ss the cache is cleared.
>>
>Does the browser (tested with IE and Firefox) remember the original
>answer ? I cannot find anything regarding this policy in the applet
>security FAQ or any other place.
>>
>Will I have to provide two identical applets to overcome this ?
>>
>Best
>Robert Larsen

>
Sounds like you should move some of your code from init() to start().

But accepting the certificate and granting extra privileges happens
before the applet starts so how would this solve anything ?
The second time the user is not even asked to accept the certificate. It
seems to be assumed that since the user didn't accept it the first time
he shouldn't even be asked again.

[Dave Miller]

Re: Signed java applet

Robert Larsen wrote:

James wrote:

>On Mon, 16 Jun 2008 12:50:13 +0200, Robert Larsen wrote:
>>

>>Hi all
>>>
>>I have a small problem with a signed applet. The applet works fine but
>>some users wont click 'yes' to give the applet further privileges (that
>>is ok too). If the user dont give the applet privileges I show a page
>>telling them that the applet wont work unless they grant the applet
>>privileges and give them a link back to the original page so that they
>>can try again if they want to. But if they follow that link, nothing
>>happens...unl ess the cache is cleared.
>>>
>>Does the browser (tested with IE and Firefox) remember the original
>>answer ? I cannot find anything regarding this policy in the applet
>>security FAQ or any other place.
>>>
>>Will I have to provide two identical applets to overcome this ?
>>>
>>Best
>>Robert Larsen

>Sounds like you should move some of your code from init() to start().

>
But accepting the certificate and granting extra privileges happens
before the applet starts so how would this solve anything ?
The second time the user is not even asked to accept the certificate. It
seems to be assumed that since the user didn't accept it the first time
he shouldn't even be asked again.

It has nothing to do with your code - it is the browser's mechanism for
handling permissions. The "don't allow" is persistent for the session.

If you are serving the applet from a dynamic page (jsp, etc.) you might
try killing the current session and starting a new one (no guarantees -
your mileage may vary). From static pages, I can't think of anything
other than serving a different applet but others may have a better idea.

--
Dave Miller
Java Web Hosting at:

http://www.cheap-jsp-hosting.com/