db-derby-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Kim Haase (JIRA)" <j...@apache.org>
Subject [jira] [Created] (DERBY-6598) Document permissions recommendations for JAR procedures
Date Tue, 03 Jun 2014 15:19:01 GMT
Kim Haase created DERBY-6598:
--------------------------------

             Summary: Document permissions recommendations for JAR procedures
                 Key: DERBY-6598
                 URL: https://issues.apache.org/jira/browse/DERBY-6598
             Project: Derby
          Issue Type: Bug
          Components: Documentation
    Affects Versions: 10.11.0.0
            Reporter: Kim Haase
            Assignee: Kim Haase


It's been recommended that we should make the documentation of the SQLJ.INSTALL_JAR procedure
(and SQLJ.REPLACE_JAR) state more explicitly that the privilege should only be granted to
trusted users. For example:

"Since this procedure can be used to install arbitrary code that runs in the same Java Virtual
Machine as the Derby database engine, the execution privilege should only be granted to trusted
users."

This needs to go into the Reference Manual topics on these procedures as well as other locations
where they are discussed.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message