db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kathey Marsden (Updated) (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (DERBY-5401) The NetServlet should require system administrator credentials in order to perform its operations on a server which requires authentication.
Date Fri, 17 Feb 2012 19:39:02 GMT

     [ https://issues.apache.org/jira/browse/DERBY-5401?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Kathey Marsden updated DERBY-5401:
----------------------------------

    Issue & fix info: Release Note Needed
              Labels: derby_triage10_9  (was: )

Triage for 10.9. Marking relese note needed as it will be a behavior change.
I tend to think that the servlet is mostly there for demo purposes, so considered changing
urgency to Low, but left it at Normal.

                
> The NetServlet should require system administrator credentials in order to perform its
operations on a server which requires authentication.
> --------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DERBY-5401
>                 URL: https://issues.apache.org/jira/browse/DERBY-5401
>             Project: Derby
>          Issue Type: Bug
>          Components: Network Server
>    Affects Versions: 10.9.0.0
>            Reporter: Rick Hillegas
>              Labels: derby_triage10_9
>
> If Derby authentication is required on the VM running derby.war, then the NetServlet
forms should require system administrator credentials in order to issue any commands. In addition,
the network connection between the browser forms and the VM should be encrypted so that those
credentials cannot be snooped.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message