Workflow template editing

I sent Mike an all inclusive .java.policy file. Didn't hear back yet, so
not sure if it was flagged or blocked.



Since we all trust Windchill as not a third party rogue software or malware,
I add the following in a new text file (filename: .java.policy ) (note the
two periods in filename) under C:\Users\<id> for windows 7 (different for
xp/unix)



grant codebase " {

permission java.security.AllPermission;

};





grant codebase " {

permission java.security.AllPermission;

};







Not granting AllPermission is a IT nightmare, because you have to revisit
everytime an new issue occurs. Better to just exempt trusted servers.



PTC actually should just document this as a technical article as this is not
well documented even by the vendor (Oracle) in a straightforward plan folks'
manner.



I have used this to support all prior JREs for older releases that are
invoked through Java 1.6 and 1.7.



- Dave

Forgot to capitalize the 'B' in codebase - so resending.





grant codeBase " {

permission java.security.AllPermission;

};





grant codeBase " {

permission java.security.AllPermission;

};

On 04/30/13 17:06, Jess Holle wrote:
> You should not need to add *any* permissions to the JRE.

The only permission I need to add, to the java policy, is the "allow use of the clipboard" for copy and paste:
permission java.awt.AWTPermission "accessClipboard";

I haven't needed the others.

>
> Having to do so indicates that either (1) you're using an unsupported Windchill version, (2) you don't have the latest Windchill MOR or patches or (3) you've managed to find something we've not yet fixed.
>
> Unfortunately given that it sounds like this is occurring for some folk using 10.1 M040, it would appear that those who have issues with the workflow applet that are resolved by messing with the java.policy file are likely experiencing #3 😞
>
> --
> Jess Holle
>
> On 4/30/2013 4:55 PM, David DeMay wrote:
>>
>> I sent Mike an all inclusive .java.policy file. Didn't hear back yet, so not sure if it was flagged or blocked.
>>
>> Since we all trust Windchill as not a third party rogue software or malware, I add the following in a new text file (filename: .java.policy ) (note the two periods in filename) under C:\Users\<id> for windows 7 (different for xp/unix)
>>
>> grant codebase " {
>>
>> permission java.security.AllPermission;
>>
>> };
>>
>> grant codebase " {
>>
>> permission java.security.AllPermission;
>>
>> };
>>
>> Not granting AllPermission is a IT nightmare, because you have to revisit everytime an new issue occurs. Better to just exempt trusted servers.
>>
>> PTC actually should just document this as a technical article as this is not well documented even by the vendor (Oracle) in a straightforward plan folks' manner.
>>
>> I have used this to support all prior JREs for older releases that are invoked through Java 1.6 and 1.7.
>>
>> - Dave
>>
>> *From:*Jess Holle [
>>
>>
>> *From:*Randy Jones [
>> *Subject:* Re: [solutions] - Workflow template editing
>>
>> On 04/30/13 12:18, Mike Lockwood wrote:
>>
>> Using Windchill 10.1 M040.
>>
>> We're seeing on multiple workstation platforms that workflow templates "freeze" such that elements can no longer be edited and the template cannot be saved. This is occuring with IE 8 and IE 9. Seems that it must somehow have to do with our Java installs but we don't know what to look
>> at to troubleshoot.
>>
>> Has anyone experienced (and solved) this?
>>
>>
>> Same problem here with 10.1 M040.
>> I am running Firefox 17.0.5esr on Solaris and jre 1.6u37.
>> Like you this setup works on 9.1 M070 with no issues.
>>
>> I downloaded the latest jre (1.7u21) and pointed my browser java plugin to that.
>> The workflow templates will now save after editing.
>>
>>
>>
>> note: All workstaions can edit workflow templates in 9.1 with no issues.
>>
>> -----End Original Message-----
>>
>>
>>
>>
>>
>> --
>>
>> ------------------------------------------------------------------------
>>
>> Randy Jones
>>
>> Systems Administrator
>>
>> Great Plains Mfg., Inc.
>>
>> 1525 E North St
>>
>> PO Box 5060
>>
>> Salina, KS USA 67401
>>
>> email:- <">mailto:->
>>
>> Phone: 785-823-3276
>>
>> Fax: 785-667-2695
>>
>> ------------------------------------------------------------------------
>>
>>
>>
>>
>> --
>>
>> ------------------------------------------------------------------------
>>
>> Randy Jones
>>
>> Systems Administrator
>>
>> Great Plains Mfg., Inc.
>>
>> 1525 E North St
>>
>> PO Box 5060
>>
>> Salina, KS USA 67401
>>
>> email:- <">mailto:->
>>
>> Phone: 785-823-3276
>>
>> Fax: 785-667-2695
>>
>> ------------------------------------------------------------------------
>>
>> -----End Original Message-----
>>
>> -----End Original Message-----
>>
>> -----End Original Message-----
>


--
------------------------------------------------------------------------
Randy Jones
Systems Administrator
Great Plains Mfg., Inc.
1525 E North St
PO Box 5060
Salina, KS USA 67401
email: -
Phone: 785-823-3276
Fax: 785-667-2695
------------------------------------------------------------------------

On 04/30/13 21:07, Jess Holle wrote:
> That's covered by a patch and/or recent MORs -- at least all cases I'm aware of are...

Jess you are correct. I removed the

permission java.awt.AWTPermission "accessClipboard";

entry from my .java.policy file and I can indeed still copy and paste with Windchill applets.
I have tested this (on Solaris 10 x64 client) with the following combinations:

Windchill 9.1 M070
Firefox 17.0.5esr w/Java(TM) Plug-in 1.6.0_37
Firefox 17.0.5esr w/Java Plug-in 1.7.0_21

Windchill 10.1 M040
Firefox 17.0.5esr w/Java Plug-in 1.7.0_21

Apparently I needed the accessClipboard for some non Windchill applets.

So for me editing the workflow templates in Windchill 10.1 M040 does NOT require any .java.policy mods. However it does require me to use jre7. In my case I can't save the workflow after editing it when using jre6 (1.6U37).

>
> On 4/30/2013 5:19 PM, Randy Jones wrote:
>> On 04/30/13 17:06, Jess Holle wrote:
>>> You should not need to add *any* permissions to the JRE.
>>
>> The only permission I need to add, to the java policy, is the "allow use of the clipboard" for copy and paste:
>> permission java.awt.AWTPermission "accessClipboard";
>>
>> I haven't needed the others.
>>
>>>
>>> Having to do so indicates that either (1) you're using an unsupported Windchill version, (2) you don't have the latest Windchill MOR or patches or (3) you've managed to find something we've not yet fixed.
>>>
>>> Unfortunately given that it sounds like this is occurring for some folk using 10.1 M040, it would appear that those who have issues with the workflow applet that are resolved by messing with the java.policy file are likely experiencing #3 😞
>>>
>>> --
>>> Jess Holle
>>>
>>> On 4/30/2013 4:55 PM, David DeMay wrote:
>>>>
>>>> I sent Mike an all inclusive .java.policy file. Didn't hear back yet, so not sure if it was flagged or blocked.
>>>>
>>>> Since we all trust Windchill as not a third party rogue software or malware, I add the following in a new text file (filename: .java.policy ) (note the two periods in filename) under C:\Users\<id> for windows 7 (different for xp/unix)
>>>>
>>>> grant codebase " {
>>>>
>>>> permission java.security.AllPermission;
>>>>
>>>> };
>>>>
>>>> grant codebase " {
>>>>
>>>> permission java.security.AllPermission;
>>>>
>>>> };
>>>>
>>>> Not granting AllPermission is a IT nightmare, because you have to revisit everytime an new issue occurs. Better to just exempt trusted servers.
>>>>
>>>> PTC actually should just document this as a technical article as this is not well documented even by the vendor (Oracle) in a straightforward plan folks' manner.
>>>>
>>>> I have used this to support all prior JREs for older releases that are invoked through Java 1.6 and 1.7.
>>>>
>>>> - Dave
>>>>
>>>> *From:*Jess Holle [
>>>>
>>>>
>>>> *From:*Randy Jones [
>>>> *Subject:* Re: [solutions] - Workflow template editing
>>>>
>>>> On 04/30/13 12:18, Mike Lockwood wrote:
>>>>
>>>> Using Windchill 10.1 M040.
>>>>
>>>> We're seeing on multiple workstation platforms that workflow templates "freeze" such that elements can no longer be edited and the template cannot be saved. This is occuring with IE 8 and IE 9. Seems that it must somehow have to do with our Java installs but we don't know what to look
>>>> at to troubleshoot.
>>>>
>>>> Has anyone experienced (and solved) this?
>>>>
>>>>
>>>> Same problem here with 10.1 M040.
>>>> I am running Firefox 17.0.5esr on Solaris and jre 1.6u37.
>>>> Like you this setup works on 9.1 M070 with no issues.
>>>>
>>>> I downloaded the latest jre (1.7u21) and pointed my browser java plugin to that.
>>>> The workflow templates will now save after editing.
>>>>
>>>>
>>>>
>>>> note: All workstaions can edit workflow templates in 9.1 with no issues.
>>>>
>>>> -----End Original Message-----
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> Randy Jones
>>>>
>>>> Systems Administrator
>>>>
>>>> Great Plains Mfg., Inc.
>>>>
>>>> 1525 E North St
>>>>
>>>> PO Box 5060
>>>>
>>>> Salina, KS USA 67401
>>>>
>>>> email:- <">mailto:->
>>>>
>>>> Phone: 785-823-3276
>>>>
>>>> Fax: 785-667-2695
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> Randy Jones
>>>>
>>>> Systems Administrator
>>>>
>>>> Great Plains Mfg., Inc.
>>>>
>>>> 1525 E North St
>>>>
>>>> PO Box 5060
>>>>
>>>> Salina, KS USA 67401
>>>>
>>>> email:- <">mailto:->
>>>>
>>>> Phone: 785-823-3276
>>>>
>>>> Fax: 785-667-2695
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> -----End Original Message-----
>>>>
>>>> -----End Original Message-----
>>>>
>>>> -----End Original Message-----
>>>
>>
>>
>> --
>> ------------------------------------------------------------------------
>> Randy Jones
>> Systems Administrator
>> Great Plains Mfg., Inc.
>> 1525 E North St
>> PO Box 5060
>> Salina, KS USA 67401
>> email:-
>> Phone: 785-823-3276
>> Fax: 785-667-2695
>> ------------------------------------------------------------------------
>>
>> -----End Original Message-----
>


--
------------------------------------------------------------------------
Randy Jones
Systems Administrator
Great Plains Mfg., Inc.
1525 E North St
PO Box 5060
Salina, KS USA 67401
email: -
Phone: 785-823-3276
Fax: 785-667-2695
------------------------------------------------------------------------