The policy file is only used when you explicitly tell the runtime to use a security manager:
java -Djava.security.manager -Djava.security.policy=/blablafilepath/.policy
If you don't run with those flags, you won't need a policy file: you can do anything. I believe the Mendix Service Console doesn't use a policy file by default, so it looks like your problem might lie elsewhere?