Currently Being Moderated

Try 0: Page 2

VERSION 1

Created on: Nov 15, 2007 12:02 PM by Curl Education - Last Modified:  Jan 3, 2008 4:32 PM by Curl Education

!../../wiki/easy-ide-book/common/images/prev_page.gif![!../../wiki/easy-ide-book/common/images/toc.gif!|http://developers.curl.com/docs/DOC-1149|Go to Table of Contents] !../../wiki/easy-ide-book/common/images/next_page.gif!

 

 

 

<font color="black">Assign Special Privileges to the Working Folder</font>

 

 

 

           

-


           

<font color="navy">The working folder</font>

            <font color="navy">     With Curl, we can create applets that can be executed over a network,     but during development it is convenient to perform execution/debugging     on a local machine. In this manual, we will be using the 'Curl' directory on the C drive to hold applets under development.     The following steps configure Curl to grant privileges to this location. You can, of course, use any directory in any location.</font>            

-


           

 

 

 

1. As shown in Figure 0-8, click start and select All Programs > Curl RTE > Curl Control Panel. The screen shown in Figure 0-9 appears.

 

 

 

 

 

2. Click the “Security Options” tab, and then click “This Computer”.

 

 

3. After the screen switches to that shown in Figure 0-11, click “Add Privileged Directory.” The dialog box shown in Figure 0-12 appears.  Input “c:\Curl”, and then click "OK". Once the privileged directory has been added to this computer, the screen shown in Figure 0-13 appears.

 

 

 

 

 

           

-


           

<font color="navy">Security and Privileges</font>

            <font color="navy">     Usually, Curl applets are stored on a Web server. From the server, users can download the applets, and then execute them on their PCs. If we were to allow applets unlimited access to resources such as the files stored on the hard disk of a user’s PC, or the registry, then it would be possible for malicious applets to steal or even destroy data.     Curl RTE has been designed to protect a user’s PC from this kind of danger, and limits the range of client resources that can be accessed by a Curl applet. We call this range, in which access is possible, the “sandbox.”</font>            

-


           

 

 

 

 

When the user knows that an applet can be trusted, he or she can change the settings to lift this restriction from Curl RTE. Applets that are not subject to this restriction are called “privileged applets” and have full access to the client’s resources.

 

 

The examples given in this manual assume that applications are stored and executed locally, and not served from a Web server. If applets or other resources, such as images, are stored on a Web server or other location, privileges are still required to execute the Curl applet. With Curl, you can assign privileges to other locations using the same methods as explained in STEP 4 in which you would specify the directory containing the applet.

 

 

 

!../../wiki/easy-ide-book/common/images/next_page.gif!

Average User Rating
(0 ratings)




Duke Duke  says:

About the statement "If applets or other resources, such as images, are stored on a Web server or other location, privileges are still required to execute the Curl applet."  It is not always the case that privileges are required when the applet is running from a web server.  The documentation that comes with the IDE explains more about security and privileges.  Also, you can easily use a http://localhost/ server instead of running from local files, which is a better development practice when working on an applet you plan to run from a webserver and without privileges.

More Like This

  • Retrieving data ...