[CALCITE-5298] CalciteSystemProperty calcite.test.dataset path check fails under Java Security Manager

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.27.0, 1.28.0, 1.29.0, 1.30.0, 1.31.0, 1.32.0
• Fix Version/s: 1.33.0
• Component/s: core
• Labels: pull-request-available
• Assignee: Kevin Risden
• Reporter: Kevin Risden
• Created: 25/Sep/22 15:12
• Updated: 07/Feb/23 22:33
• Resolved: 10/Jan/23 18:04

Description

SOLR-16433 found that Calcite does not handle the Java security manager returning permission denied when checking that the calcite.test.dataset path exists. Solr runs with a security manager that doesn't allow arbitrary filesystem access. This failure causes Calcite to not load and therefore unusable.

The code in question is here: https://github.com/apache/calcite/blame/main/core/src/main/java/org/apache/calcite/config/CalciteSystemProperty.java#L189

A few other places in Calcite already check for SecurityException: https://github.com/apache/calcite/search?q=SecurityException

Issue Links

• is related to: SOLR-16433 Security Manager prevents Solr SQL from working
• relates to: CALCITE-4823 JEP 411: AccessControlException, AccessController in java.security has been deprecated and marked for removal
• links to: GitHub Pull Request #2919