javax.security.auth.Policy has been deprecated since Java 1.4 and has now been removed. It should be replaced by the use of java.security.Policy and java.security.ProtectionDomain

When
a Java class uses javax.security.auth.Policy

Perform
add a hint to replace this with java.security.Policy, replacing policy.getPermissions(codeSource,subject) with policy.getPermissions(new ProtectionDomain(codeSource, null, null, new Principal[] { subject })