Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: <derby-dev@db.apache.org>
Received-SPF: pass (herse.apache.org: local policy)
Date: Thu, 05 Jul 2007 18:18:29 -0700
From: Rick Hillegas <Richard.Hillegas@Sun.COM>
Subject: Re: 10.3.1.0b eclipse plugin & default security
In-reply-to: <c25576af0707051642i6fc46798g6232a10e4cef9eb5@mail.gmail.com>
Sender: Richard.Hillegas@Sun.COM
To: derby-dev@db.apache.org
Message-id: <468D9865.2000700@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
References: <c25576af0707050745w60def359t4d6b53bb45984397@mail.gmail.com>
 <468D0CF9.2060203@sun.com>
 <c25576af0707051127s574f821dh5ca99ace52389054@mail.gmail.com>
 <468D3CA6.9060403@sun.com> <468D6C9C.10006@apache.org>
 <c25576af0707051642i6fc46798g6232a10e4cef9eb5@mail.gmail.com>
User-Agent: Thunderbird 1.5.0.5 (X11/20060828)

Myrna van Lunteren wrote:
> On 7/5/07, Daniel John Debrunner <djd@apache.org> wrote:
>> Rick Hillegas wrote:
>> > We could add this permission to read the user.dir property to the
>> > default policy and the template policy. Can you try that experiment 
>> and
>> > see if it fixes your Eclipse problem? If it does, then I recommend
>> > making this change.
>>
>> Why would you recommend the change? Did I miss some analysis on why this
>> property is needed in this environment and not elsewhere?
>>
>> Thanks,
>> Dan.
>>
> For what it's worth, it *does* work...I don't think we should change
> the template policy though...
>
> Myrna
It seems that some path through the engine startup ends up needing to 
read this property. The question may be, why haven't we followed that 
path in any of our other tests. I think that the template policy should 
mirror the default policy. Here again, we are arming ourselves to handle 
the combination of initial conditions which causes us to read this property.

Regards,
-Rick