I'm not using loadBytes.
Bizarre, but I believe I found the problem. It happens in the web app because after sending the http web service "signin" request I immediately send getdata web service "notes" request.
This works fine in the air app but in the web app I guess you can only make one web service request per user action
I even tried delaying the second web service request by 10 seconds but I still get the following error.
*** Security Sandbox Violation ***
Connection to http://localhost:8888/users/bill/notes halted - not permitted from http://localhost:8888/notesweb/NotesWeb.swf/[[DYNAMIC]]/4
Error: Error #2029: This URLStream object does not have a stream opened.
at DirectHTTPMessageResponder/requestTimedOut()[E:\dev\4.x\frameworks\projects\rpc\src\mx\me ssaging\channels\DirectHTTPChannel.as:474]
at mx.messaging::MessageResponder/timeoutRequest()[E:\dev\4.x\frameworks\projects\rpc\src\mx \messaging\MessageResponder.as:356]
However, when I send the request http://localhost:8888/users/bill/notes from a user action, no problem.
If anyone knows where this is documented, I would really like to understand this behavior.
I don't think that's the case. It really seems like more than one SWF is
being loaded by your app (maybe as RSLs) and that there is some security
issue related to it. It might be that on the user action, the code in the
unpermitted SWF is not making the request.
Each SWF loaded has its own security rules.
Not sure if this helps in your case, but I had a similar warning.
When I changed the "Local playback security:" in the "Publish Settings" of the Flash application from "Access local files only" to "Access network only" that solved my problem.