Permissions: all-permissions For sandboxed apps (no file/network access):
Permissions: sandbox Also add (strongly recommended): java security is blocking application
Codebase: * Application-Name: YourAppName Then rebuild and re‑sign the JAR. Unsigned JARs with a Permissions attribute will still be blocked unless the entire application is signed. When signing, include a timestamp so the signature remains valid after your certificate expires: java security is blocking application