I have deployed a Hibernate 4.1.15 based Web Application to a Tomcat 8 Server running under Security Manager. During Hibernate's configuration/environment setup there is usage of System.getProperties() in the Environment Class code.

This code line triggers a need for the Tomcat Permission:
permission java.util.PropertyPermission "*", "read,write";

The Internet Admins would prefer not to grant this permission in the environment. Is there a way around this?

I am using a named connection datasource defined on the Server. I do not have hibernate.properties, just a hibernate.cfg.xml with a few properties.