How can a system administrator secure a WebSphere Application Server environment to ensure that an...

When Java 2 security is enabled for a WebSphere Application Server, all the applications that run on WebSphere Application Server undergo a security check before accessing system resources. An application might need a was.policy file if it accesses resources that require more permissions than those granted in the default app.policy file

References: http://www.aiotestking.com/ibm/how-can-a-system-administrator-secure-a-websphere-application-server-environment-to-ensure-that-an-application-code-will-not-be-allowed-to-access-any-files-in-the-servers-file-system/