Accessing non-class files from JAR when using a Security Manager

[Rob]

I have a web application in Tomcat 5, using j2sdk 1.4.2-03 that uses
the itext library from sourceforge for writing PDF files. The font
files for use in the PDF documents come from the itext JAR. When
running Tomcat 5 without a security manager it works ok, but when
using a security manager I get an error that says the font file cannot
be found.

If I use the AllPermissions permission in my catalina.policy (the
policy file for Tomcat) the font file is found - so what are the
actual Permissions I need to set to get it to work without having to
resort to AllPermissions?

Rob