Thanks. I did more reading on derby doc and find the encryption may serve the purpose since the derby db is used as embed db.

Hong

On 9/23/06, Rajesh Kartha <kartha02@gmail.com> wrote:
Hello,

The 'derby.connection.requireAuthentication' need to set as system
property (using -D)  while running your application
or as a database property (within the database).

More info at:
http://db.apache.org/derby/docs/dev/tuning/rtunproper27467.html

Also, there is some discussion on this in one of the JIRA issues at:
http://issues.apache.org/jira/browse/DERBY-1711

From you example you seem to pass the property as Connection properties
which has a limited scope.

Hope the above helps. Do post to the list should you have further questions.

-Rajesh


Hong Ji wrote:

> The ij is still able to access the database without user name and
> password.
>
> I set properties and create new database in java as following:
>
>         m_dbProperties = new Properties();
>         m_dbProperties.put("user", "admin");
>         m_dbProperties.put("password", "adminadmin");
>         m_dbProperties.put(" derby.driver",
> "org.apache.derby.jdbc.EmbeddedDriver");
>         m_dbProperties.put("derby.url", "jdbc:derby:");
>         m_dbProperties.put("derby.connection.requireAuthentication ",
> "true");
>
>         m_dbProperties.put("create", "true");
>
>         dbConnection = DriverManager.getConnection(dbUrl, m_dbProperties);
>
> Is something still not set up properly?
>
> Thanks.
>
> Hong
>
>
>
> On 8/29/06, *Francois Orsini* <francois.orsini@gmail.com
> <mailto: francois.orsini@gmail.com>> wrote:
>
>     and make sure to re-boot the database or derby instance for the
>     'derby.connection.requireAuthentication' property to be taken into
>     account...It is a static property.
>
>
>     On 8/29/06, *Fernanda Pizzorno* <Fernanda.Pizzorno@sun.com
>     <mailto:Fernanda.Pizzorno@sun.com >> wrote:
>
>         To enable user authentication in Derby you must set the
>         /derby.connection.requireAuthentication/ property to true.
>
>         You can find more information about derby security on "Derby and
>         Security" in "/Derby Developer's Guide"
>         ( http://db.apache.org/derby/docs/dev/devguide/
>         < http://db.apache.org/derby/docs/dev/devguide/>).
>
>         Fernanda
>         /
>         Hong Ji wrote:
>> Hello,
>>
>> I created a derby database in Java with user name and password.
>> However, the
>> ij tool can open and view the database without input of the
>         user name or
>> password.
>>
>> So how could a derby database be protected? Anyone can use ij
>         to view the
>> database?
>>
>> Thanks.
>>
>> Hong Ji
>>
>
>
>