The ProgrammaticLoginPermission permission is required to invoke the programmatic login mechanism for an application. This permission is not granted by default to deployed applications because this is not a standard J2SE mechanism.
To grant the required permission to the application, add the following to the instance_dir/config/server.policy file:
grant codeBase "file:jar_file_path" { permission com.sun.appserv.security.ProgrammaticLoginPermission "login"; };
The jar_file_path is the path to the application's JAR file.
For more information about the server.policy file, see The server.policy File.