db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Myrna van Lunteren (JIRA)" <j...@apache.org>
Subject [jira] Updated: (DERBY-2908) / 1.1.0 Derby eclipse plugin gives security error referring to user.dir read permission because derby.system.home is set to '.'
Date Sun, 08 Jul 2007 02:28:04 GMT

     [ https://issues.apache.org/jira/browse/DERBY-2908?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel

Myrna van Lunteren updated DERBY-2908:

    Attachment: DERBY-2908_plugin111.diff

Attaching a patch which modifies the plugin to use 'null' by default for derby.system.home.
I put some extra if (<derby.system.home> != null) although I'm not sure that was even
Also modified the doc to reflect a change in the default value.
Increased the plugin versions to 1.1.1. for this.

If this looks ok, and someone checks tonight (California time) then I wonder if I should undo
Rick's changes to the default policy file & documentation,...?

> / 1.1.0 Derby eclipse plugin gives security error referring to user.dir read
permission because derby.system.home is set to '.'
> ----------------------------------------------------------------------------------------------------------------------------------------
>                 Key: DERBY-2908
>                 URL: https://issues.apache.org/jira/browse/DERBY-2908
>             Project: Derby
>          Issue Type: Bug
>          Components: Eclipse Plug-in
>    Affects Versions:,,,
>         Environment: eclipse 3.2.1 with derby core plugin, ui and doc plugin
>            Reporter: Myrna van Lunteren
>         Attachments: derby-2908-patchDefaultPolicy-01.diff, DERBY-2908_plugin111.diff,
> The Derby nature sets by default -Dderby.system.home=. (set in plugins/eclipse/org.apache.derby.ui/src/org/apache/derby/ui/properties/DerbyProperties.java
and checked in plugins/eclipse/org.apache.derby.ui/src/org/apache/derby/uitl/DerbyServerUtils.java)
> With the default security policy, however, such a setting for ij & NetworkServerControl
results in a security error in ij.
> (See stack in thread: http://www.nabble.com/
> It's possible this is a bug in itself...
> One work around is to add the following permission to the default policy file:
> permission java.util.PropertyPermission "user.dir", "read";
> Another solution is to not set the derby.system.home to anything by default, and if it's
not set to anything, not pass on -Dderby.system.home= to the networkserver process (specifying
-Dderby.system.home= without a value fails to start networkserver).
> This would mean increasing the version of the plugins. To 1.1.1?
> Yet another thing would be to adjust the plugin to handle adjusting the security policy...

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message