Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
10.14.1.0
-
None
-
Release Note Needed
Description
As described here (https://db.apache.org/derby/docs/10.14/security/rsecnetservbasic.html), if you start the Network Server without specifying a security manager, the Network Server will install a default Java security manager that enforces a basic policy.
This basic security policy could be trimmed down and made simpler.
Users who desire a more complex and sophisticated Network Server security policy already have the ability to provide one, as described here (https://db.apache.org/derby/docs/10.14/security/csecjavasecurity.html), so trimming down the basic security policy does not affect such deployments.