Signing Code and Granting It Permissions

Set Up a Policy File to Grant the Required Permission

Next, you will use the Policy Tool to create a policy file named raypolicy and in it grant a permission to code from a signed JAR file.

The JAR file must have been signed using the private key corresponding to the public key imported into Ray's keystore (raystore) in the previous step. The certificate containing the public key is aliased by susan in the keystore. We will grant such code permission to read any file in the C:\TestData\ directory.

The steps are:

1. Start Policy Tool

2. Specify the Keystore

3. Add a Policy Entry with a SignedBy Alias

4. Save the Policy File

Signing Code and Granting It Permissions