db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kristian Waagan <Kristian.Waa...@Sun.COM>
Subject Policy file editor (was: Re: [jira] Commented: (DERBY-2109) System privileges)
Date Mon, 08 Jan 2007 08:48:54 GMT
David Van Couvering wrote:
[ snip ]

> I have to be honest I really hate the UI for Java security.  The policy 
> file is so arcane.   Does anyone know if there is a nice UI that runs on 
> top of a java security policy file that makes it easier to manage it?
> 

Hi David,

At least with Suns distributions, you get the 'policytool' UI. Don't 
know if other vendors provide a similar tool.
I won't judge whether it is nice or not, but at least you avoid many 
spelling and syntax errors. It has a list of built-in permissions, and 
you can select permissions from a pull-down menu or enter them yourself.


As a side note, using the policytool on our default policy file 
(functionTests/util/derby_tests.policy) does not work. If you try to 
open it you get a MalformedURLException because the codebase 
specifications does not include a protocol. I suppose the protocol is 
part of the variables expanded into the policy file (for instance 
'derbytesting.codejar').
If all codebases are specified using the file:// protocol, we could 
consider changing the variables in the policy file to exclude the 
protocol and instead "hardcode" it.



-- 
Kristian

[ snip ]

Mime
View raw message