Thanks every one:

I was headache for a week that our application uses java.net.URL.openStream() on a "file:/[path]" but an IOException occured on windows(access denied) and linux(is a directory).

This method returns file name list of the directory...

I thought jboss might has security settings some where. Could some one offer me a help?

Thank you very much.