[#DERBY-624] Running derbynetclientmats and derbynetmats requires accessDeclaredMembers permission to be granted with sane=true

Derby

Running derbynetclientmats and derbynetmats requires accessDeclaredMembers permission to be granted with sane=true

Created: 13/Oct/05 11:10 PM Updated: 12/Jul/06 06:43 AM

Return to search

Component/s:

Network Server, Services

Affects Version/s:

10.2.1.6

Fix Version/s:

10.1.2.1, 10.2.1.6

Time Tracking:

Not Specified

Issue Links:

Blocker

This issue blocks:

~~DERBY-615~~ Get 95% of functional tests running under the SecurityManager when running derbyall

Resolution Date:

14/Oct/05 11:41 PM

Description

« Hide

About 17 tests fail if this permission is not granted. Permission should not be required to run Derby in embedded or network server mode.

permission java.lang.RuntimePermission "accessDeclaredMembers";

In some (all?) cases it is because getDeclaredConstrunctor or getDeclaredMethod is called when the getPublic versions would suffice.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

[ Permlink | « Hide ]

Daniel John Debrunner added a comment - 13/Oct/05 11:13 PM

Blocks ~~DERBY-615~~ because granting this permission so widely in the policy file has the potential to hide security bugs as more tests are enabled to be run under the security manager.