Using xstream with JWS / JNLP

[dranonymous]

I've got an app that uses xstream (http://xstream.codehaus.org/) to serialize objects in and out for me. I can jar my application up and run it fine. When I try to deploy it using java web start, I get a security error.

Caused by: java.security.AccessControlException: access denied (java.lang.RuntimePermission accessDeclaredMembers)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkMemberAccess(Unknown Source)
at java.lang.Class.checkMemberAccess (Unknown Source)
at java.lang.Class.getDeclaredFields(Unknown Source)
at com.thoughtworks.xstream.core.JVM.<clinit>(JVM.java:24)

Has anyone used xstream with jws?

Thanks,
Dr. A>

[cylab]

I guess you have to sign your app to get enough permissions to use xstream on the client machine

[dranonymous]

I was able to get things working, by signing the jars and setting the <all-permissions/> tag in the jnlp. 

Can someone tell me what other tags are available under the <security> section of the jnlp?  The docs at Sun don't mention anything other then the one I used.

Thanks,
Dr. A>