Return-Path: Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: (qmail 39048 invoked from network); 30 Nov 2005 21:59:11 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur.apache.org with SMTP; 30 Nov 2005 21:59:11 -0000 Received: (qmail 32660 invoked by uid 500); 30 Nov 2005 21:59:11 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 32632 invoked by uid 500); 30 Nov 2005 21:59:10 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 32623 invoked by uid 99); 30 Nov 2005 21:59:10 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 30 Nov 2005 13:59:10 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=UNPARSEABLE_RELAY X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [192.18.98.36] (HELO brmea-mail-4.sun.com) (192.18.98.36) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 30 Nov 2005 14:00:40 -0800 Received: from phys-mpk-1 ([129.146.11.81]) by brmea-mail-4.sun.com (8.12.10/8.12.9) with ESMTP id jAULwnD7000573 for ; Wed, 30 Nov 2005 14:58:49 -0700 (MST) Received: from conversion-daemon.mpk-mail1.sfbay.sun.com by mpk-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) id <0IQS00F01FKDY5@mpk-mail1.sfbay.sun.com> (original mail from David.Vancouvering@Sun.COM) for derby-dev@db.apache.org; Wed, 30 Nov 2005 13:58:49 -0800 (PST) Received: from [129.150.36.100] (vpn-129-150-36-100.Central.Sun.COM [129.150.36.100]) by mpk-mail1.sfbay.sun.com (iPlanet Messaging Server 5.2 HotFix 1.24 (built Dec 19 2003)) with ESMTP id <0IQS00L1GFPG01@mpk-mail1.sfbay.sun.com> for derby-dev@db.apache.org; Wed, 30 Nov 2005 13:58:30 -0800 (PST) Date: Wed, 30 Nov 2005 13:58:26 -0800 From: "David W. Van Couvering" Subject: Re: [jira] Updated: (DERBY-85) NPE when creating a trigger on a table and default schema doesn't exist. In-reply-to: <438DEC9D.70205@debrunners.com> To: derby-dev@db.apache.org Message-id: <438E2082.6080605@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_ViRks+R23KdtMkPDH3Xnkg)" X-Accept-Language: en-us, en User-Agent: Mozilla Thunderbird 1.0.7 (Windows/20050923) References: <1552261566.1133368531596.JavaMail.jira@ajax.apache.org> <438DD72A.1000909@debrunners.com> <438DEC9D.70205@debrunners.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N This is a multi-part message in MIME format. --Boundary_(ID_ViRks+R23KdtMkPDH3Xnkg) Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT I got this too, I was pretty sure it was that junit is trying to read system properties, the first one being "user.dir". I think it also then tries to read Junit properties out of the user's home directory? I spent some time trying to modify the test harness to indicate where the third party jars were to try and fix this, but finally gave up and turned off security manager for my JUnit test (I was going to log a separate bug for this, I just didn't think it was worth spending all my time trying to fix this right now). David Daniel John Debrunner wrote: > Dyre.Tjeldvoll@Sun.COM wrote: > >>Daniel John Debrunner writes: > > >>>Why do you need to grant permissions to read all files for the >>>derbyTesting and junit jars? >> >> >>I'm sorry, but I think you need to ask the junit developers about >>that. I don't know exactly which files junit wants to access, but the >>last error I saw (before granting read access to all files), was an >>access exception because junit was trying to read my home directory to >>figure out if there was a junit.properties file there, I think. I >>don't really understand why derbyTesting.jar needs the same access, >>but I assume it is because the Bugs class (which inherits TestCase) >>ends up there... >> >>I guess it is possible to find the minimal set of file and property >>rights needed by junit, either by reading the junit source, or through >>trial and error, but given the comment in the policy file about not >>trying to make the test harness secure, I didn't think it was worth >>it... > > > Just trying to understand it. Adding broad permissions, in my mind, > increases the chance of a SecurityManager related bug being hidden. > > I think derbyTesting.jar would need the permission because it is in the > calling stack of the junit code, and the junit code is not coded to use > privileged blocks. I don't think it would have anything to do with the > Bugs class, but what do you mean by it "ends up there"? Is junit copying > classes out of derbyTesting.jar? > > Dan. > > > >> >>>Why not just all files under the user.dir? >>> >>> >>>Dan. >>> >>> >> >> > > --Boundary_(ID_ViRks+R23KdtMkPDH3Xnkg) Content-type: text/x-vcard; charset=utf-8; name=david.vancouvering.vcf Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=david.vancouvering.vcf begin:vcard fn:David W Van Couvering n:Van Couvering;David W org:Sun Microsystems, Inc.;Database Technology Group email;internet:david.vancouvering@sun.com title:Senior Staff Software Engineer tel;work:510-550-6819 tel;cell:510-684-7281 x-mozilla-html:TRUE version:2.1 end:vcard --Boundary_(ID_ViRks+R23KdtMkPDH3Xnkg)--