Ron Monzillo's Weblog

Glassfish uses Jacc for its container access decisions. The container access decisions are performed independent of whether a System SecurityManager is configured for the Glassish Server. You should not define an unqualified grant of AllPermission in server.policy, .java.policy, or in any of the policy files identified in jre/lib/security/java.security. JACC leverages the replacability afforded by the JRE to enable replacability of the container policy decision subsystem.[Read More]