Mailing-List: contact derby-user-help@db.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Derby Discussion" <derby-user@db.apache.org>
Received-SPF: pass (nike.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <15725696.post@talk.nabble.com>
Date: Wed, 27 Feb 2008 15:05:46 -0800 (PST)
From: bradm6406 <bradm6406@hotmail.com>
To: derby-user@db.apache.org
Subject: Signed jar file loaded in DB
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Hi,

I am having problems running code from within a signed jar file if the jar
file has been loaded into the database using sqlj.install_jar.

I have signed my jar file and if I add the jar file to my Java ClassPath
then the policy file below works just fine and I can run the code in my jar
file.  If I remove the jar file from my Java ClassPath and install the jar
into the database using sqlj.install_jar('my.jar', 'APP.myClass') and
SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.classpath',
'APP.myClass') then I get the error "The exception
'java.security.AccessControlException: access denied
(java.util.PropertyPermission derby.system.home read)' was thrown while
evaluating an expression." when trying to read the derby.system.home
property in code inside my jar file.

I am using the default security manager (java.security.manager="").

Here are the relevant pieces of my policy file.
------------------------------------------------------------
keystore "my.keystore";

grant signedBy "myalias" 
{
  permission java.io.FilePermission "${derby.system.home}${/}-",
"read,write,delete";
  permission java.util.PropertyPermission "derby.*", "read";
  permission java.lang.RuntimePermission "loadLibrary.*";
  permission java.util.PropertyPermission "user.dir", "read";
};
------------------------------------------------------------

I tried setting the keystore value to "${derby.system.home}${/}my.keystore";
in case the problem was that Derby was unable to find my.keystore without
having the full path to it, but that didn't work.

I am using Derby 10.3.2.1 on a Windows XP Pro machine.

Any suggestions?


Thanks,

Brad
-- 
View this message in context: http://www.nabble.com/Signed-jar-file-loaded-in-DB-tp15725696p15725696.html
Sent from the Apache Derby Users mailing list archive at Nabble.com.