Attaching patch for this feature. This patch adds a system procedure for reloading the security policy file. This patch also adds a regression test which verifies that only the DBA can reload the policy file and only if the getPolicy() permission has been granted by the already-loaded policy.
This patch touches the following files:
Wire the new procedure into our SQL machinery.
Add a new error message, provoked when the procedure is called but getPolicy() wasn't granted.
Add getPolicy() privilege to the Basic policy file loaded by the secure server.
Wire the new unit test into our JUnit machinery.
Add getPolicy() permission to the default testing policy.
Make it possible for the decorators to unload the security manager and load a new one with a different policy file.
Replace some magic strings with a constant and make the DBO;s name public. Also add a privilege execution block around a case exposed by the new test.
Replace some magic strings with constants and make them public.