Return-Path: X-Original-To: apmail-db-derby-dev-archive@www.apache.org Delivered-To: apmail-db-derby-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 9026A11B59 for ; Mon, 7 Jul 2014 14:34:34 +0000 (UTC) Received: (qmail 16505 invoked by uid 500); 7 Jul 2014 14:34:34 -0000 Delivered-To: apmail-db-derby-dev-archive@db.apache.org Received: (qmail 16437 invoked by uid 500); 7 Jul 2014 14:34:34 -0000 Mailing-List: contact derby-dev-help@db.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: Delivered-To: mailing list derby-dev@db.apache.org Received: (qmail 16214 invoked by uid 99); 7 Jul 2014 14:34:34 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 07 Jul 2014 14:34:34 +0000 Date: Mon, 7 Jul 2014 14:34:34 +0000 (UTC) From: "Knut Anders Hatlen (JIRA)" To: derby-dev@db.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (DERBY-3476) Permissions and Principal objects added by this feature need to be final and have serialization identifiers MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/DERBY-3476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Knut Anders Hatlen updated DERBY-3476: -------------------------------------- Attachment: d3476-1a-system-permission.diff The patch [^d3476-1a-system-permission.diff] makes the following changes: - Add a readObject() method to the SystemPermission class which performs validation of name and actions when deserializing a SystemPermission object. (It performs the same checks as in the constructor.) - Add a test case that verifies that deserialization will raise exceptions when invalid SystemPermission objects are read from a stream. - Add test cases that verify that the SystemPermission, DatabasePermission and SystemPrincipal classes are declared final. All regression tests ran cleanly with the patch. > Permissions and Principal objects added by this feature need to be final and have serialization identifiers > ----------------------------------------------------------------------------------------------------------- > > Key: DERBY-3476 > URL: https://issues.apache.org/jira/browse/DERBY-3476 > Project: Derby > Issue Type: Sub-task > Components: Services > Reporter: Daniel John Debrunner > Attachments: d3476-1a-system-permission.diff > > > Need serialization id to ensure the class is portable across releases. > Need final to provide security. > (assumes patch10 is committed from DERBY-2109) -- This message was sent by Atlassian JIRA (v6.2#6252)