Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: <derby-dev@db.apache.org>
Received-SPF: pass (asf.osuosl.org: local policy)
Date: Wed, 19 Jul 2006 20:13:03 -0400
From: "Lance J. Andersen" <Lance.Andersen@Sun.COM>
Subject: Re: [jira] Created: (DERBY-1540) JDBC 4 EoD with default
 QueryObjectGenerator  fails with SecurityManager
In-reply-to: <44BEC4C2.9070704@sun.com>
Sender: Lance.Andersen@Sun.COM
To: "Lance J. Andersen" <Lance.Andersen@Sun.COM>
Cc: derby-dev@db.apache.org, Amit Handa <Amit.Handa@Sun.COM>,
        Sushmita Sharma <Sushmita.Sharma@Sun.COM>
Message-id: <44BECA8F.5080902@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=UTF-8
Content-transfer-encoding: 7BIT
References: <26409063.1153352353822.JavaMail.jira@brutus>
 <44BEC4C2.9070704@sun.com>
User-Agent: Thunderbird 1.5.0.4 (Windows/20060516)

btw, did you try this with Beta2 of Mustang as i would be surprised if 
this fails as Rick worked with Amit on this earlier.


Lance J. Andersen wrote:
> Amit,
>
> Didn't u fix this already?
>
>
> Please see the attached
>
> Daniel John Debrunner (JIRA) wrote:
>> JDBC 4 EoD with default QueryObjectGenerator  fails with SecurityManager
>> ------------------------------------------------------------------------
>>
>>                  Key: DERBY-1540
>>                  URL: http://issues.apache.org/jira/browse/DERBY-1540
>>              Project: Derby
>>           Issue Type: Bug
>>           Components: JDBC
>>     Affects Versions: 10.2.0.0
>>             Reporter: Daniel John Debrunner
>>
>>
>> The test jdbc4/TestQueryObject runs without the security manager 
>> because the default QueryObjectGenerator uses reflection.
>> See  
>> trunk/java/testing/org/apache/derbyTesting/functionTests/tests/jdbc4/TestQueryObject_app.properties 
>>
>>
>> Seems like a bug, but not sure of its cause or solution: Could be one 
>> (or none) of:
>>
>> - Make changes in Derby code, e.g. add privilege blocks but don't see 
>> how this will solve anything as it's not Derby code that's calling 
>> the reflection and I don't see any javadoc comments in JDBC 4.0 about 
>> methods throwing SecurityExceptions.
>>
>> - document the privileges required to use the EoD features, though 
>> not sure how we would document the ability to grant a privilege to 
>> system (JDK) code. Are these privileges documented in the JDBC spec?
>>
>> - a bug in the Mustang beta, default query object not being treated 
>> as system code, no priv blocks in it?
>>
>> - a limitation of the default  QueryObjectGenerator , cannot use with 
>> a security manager?
>>
>> - a Derby test problem?
>>
>> This is more of a tracking issue, with a dump of my thoughts.
>>
>>
>>   
>