Mailing-List: contact derby-user-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Derby Discussion" <derby-user@db.apache.org>
Received-SPF: pass (nike.apache.org: local policy)
Date: Tue, 06 Nov 2007 05:37:48 -0800
From: Rick Hillegas <Richard.Hillegas@Sun.COM>
Subject: Re: Server: deny connection to directories outside of known
 directories
In-reply-to: <200711061029.34383.daniel@nuix.com>
Sender: Richard.Hillegas@Sun.COM
To: Derby Discussion <derby-user@db.apache.org>
Message-id: <47306E2C.5040204@sun.com>
MIME-version: 1.0
Content-type: text/plain; format=flowed; charset=ISO-8859-1
Content-transfer-encoding: 7BIT
References: <200711061029.34383.daniel@nuix.com>
User-Agent: Thunderbird 2.0.0.6 (Macintosh/20070728)

Daniel Noll wrote:
> Hi all.
>
> Is there some way for the Derby server to allow custom code to determine 
> whether a directory can be opened for a database?  I read something about a 
> policy file but that doesn't really suit our use case as the list of 
> directories can be changed by the admin at runtime.
>
> Daniel
>   
Hi Daniel,

In 10.4 we are adding two system privileges, tracked by DERBY-2109. One 
of these privileges is related to your concern. It is a system privilege 
which limits database creation to specific locations in the file system. 
The functional spec attached to DERBY-2109 explains this in greater 
detail. This feature is being built on top of Java's security mechanism 
and will be managed by a policy file as you say.

If you are interested, you might want to read that functional spec: 
http://issues.apache.org/jira/secure/attachment/12354506/systemPrivs.html 
It may provide the foundation for the feature you need.

Hope this helps,
-Rick