[DERBY-2908] 10.3.1.0 / 1.1.0 Derby eclipse plugin gives security error referring to user.dir read permission because derby.system.home is set to '.'

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.3.1.4, 10.4.1.3
• Fix Version/s: 10.3.1.4
• Component/s: Eclipse Plug-in
• Environment: eclipse 3.2.1 with derby 10.3.1.0 core plugin, ui and doc plugin 1.1.0.
• Urgency: Normal
• Issue & fix info: Release Note Needed
• Bug behavior facts: Regression
• Assignee: Richard N. Hillegas
• Reporter: Myrna van Lunteren
• Created: 06/Jul/07 05:04
• Updated: 30/Jun/09 16:12
• Resolved: 08/Jul/07 15:53

Description

The Derby nature sets by default -Dderby.system.home=. (set in plugins/eclipse/org.apache.derby.ui/src/org/apache/derby/ui/properties/DerbyProperties.java and checked in plugins/eclipse/org.apache.derby.ui/src/org/apache/derby/uitl/DerbyServerUtils.java)
With the default security policy, however, such a setting for ij & NetworkServerControl results in a security error in ij.
(See stack in thread: http://www.nabble.com/10.3.1.0b-eclipse-plugin---default-security-tf4030218.html)

It's possible this is a bug in itself...
One work around is to add the following permission to the default policy file:
permission java.util.PropertyPermission "user.dir", "read";

Another solution is to not set the derby.system.home to anything by default, and if it's not set to anything, not pass on -Dderby.system.home= to the networkserver process (specifying -Dderby.system.home= without a value fails to start networkserver).
This would mean increasing the version of the plugins. To 1.1.1?

Yet another thing would be to adjust the plugin to handle adjusting the security policy...

Issue Links

• relates to: DERBY-2913 Derby Eclipse ui plugin should make possible to switch networkserver to -noSecurityManager, or change to a user specified policy file for network server; doc plugin should document this