title: How to set java security policy in tomcat of a web application giving platform to run codes of different languages
body: <p>In my web application I am providing platform to run external codes which will be stored in a particular location say "C:\Users\test".</p>
  
  <p>I want to deny permission for <code>System.getProperty("user.home")</code> to read and write and not be able to make any http connection through the codes. How to achieve this?</p>
  
  <p>I also have another question related to it , that is, as we all know that we cannot deny permissions from policy text file , so can anyone let me know what are the permissions given when we mention <code>permission java.security.AllPermission;</code> in policy file?</p>