Mailing-List: contact dev-help@clerezza.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@clerezza.apache.org
Received-SPF: pass (athena.apache.org: domain of enricodaga@gmail.com
 designates 209.85.223.181 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CALvhUEVVsJA0WiLNmgwJiPiPxeNqJTronoX8YtiEQNaX2VjW1g@mail.gmail.com>
References: 
 <CAGTWk78E5vZYatWak+swy0Cgg9+=-=K=hwHm7qW1J=m5vwhQ9g@mail.gmail.com>
 <CALvhUEVVsJA0WiLNmgwJiPiPxeNqJTronoX8YtiEQNaX2VjW1g@mail.gmail.com>
From: Enrico Daga <enricodaga@gmail.com>
Date: Thu, 27 Mar 2014 18:45:47 +0000
Message-ID: 
 <CAGTWk79gU=zLbwNb3jHG_AGqY1c8FbMXzVAefbvXq6gQUtfKhg@mail.gmail.com>
Subject: Re: How to deal with java security for the virtuoso jdbc connection
To: =?UTF-8?Q?Reto_Gm=C3=BCr?= <reto@wymiwyg.com>
Cc: dev@clerezza.apache.org, ENRICO DAGA <enridaga@apache.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Reto,
this is exactly the clarification I needed.

Cheers,
Enrico

On 27 March 2014 18:34, Reto Gm=C3=BCr <reto@wymiwyg.com> wrote:
> Hi,
>
> As you described it in the issue doing a privileged action is the right
> thing to do.
>
> Technically you could also assign the needed permission to the base-role =
but
> this seems the wrong solution. As when somebody has the permission to acc=
ess
> a certain graph one shouldn't need additional permission like network
> permission or file access permission to effectively access that graph.
>
> Cheers,
> Reto
>
>
> On Thu, Mar 27, 2014 at 6:59 PM, enridaga <enridaga@apache.org> wrote:
>>
>> Hi,
>> I am having an
>>
>> java.security.AccessControlException: access denied
>> ("java.net.SocketPermission" "<this-is-my-virtuoso-db-host>"
>> "resolve")
>>
>> thrown while attempting to connect to my virtuoso database.
>> I can't say why I did not have it before...
>> I know I could manage this in the Virtuoso adapter, but which is the
>> proper/clerezza way of doing it?
>>
>> Best,
>> Enrico
>>
>> --
>>
>> ------------------------------------------------------------------------=
------
>> enridaga
>
>


--=20
Enrico Daga

--
http://www.enridaga.net
skype: enri-pan