Tomcat Security Manager problem

[Ragazzo]

When I start tomcat with "-security," the following code no longer
works:

InputStream in = getServletContext().getResourceAsStream (
"/WEB-INF/files/file.xml");

The code works fine without the security manager enabled, but now I
always get a <null> instead of the <InputStream>. My first thought
was that I don't have read permissions for the directory, but the
catalina.policy file explicitly states that Web applications will get
permissions to read and write in their application directory.

An thoughts?

Thanks!

Jen