[DERBY-2470] No authentication required to restore a backup

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 10.2.2.0
• Component/s: Tools
• Labels: derby_triage10_5_2
• Environment: Java 1.6.0-b105; Linux 2.6.20 i686
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Unassigned
• Reporter: Juha Heljoranta
• Created: 20/Mar/07 13:02
• Updated: 29/Oct/12 16:58

Description

My Derby has following properties set:

derby.connection.requireAuthentication=true
derby.authentication.provider=BUILTIN
derby.database.defaultConnectionMode=noAccess
derby.database.fullAccessUsers=foo
derby.user.foo=bar

If I'll execute a restore statement from ij the backup will be restored plus it gives an authentication error:

ij> connect 'jdbc:derby:sample;restoreFrom=backup1';
ERROR 08004: Connection refused : Invalid authentication

If I add the user and password arguments to the url then the restore works as before without the error message.

Issue Links

• is related to: DERBY-2109 System privileges
• is related to: DERBY-2264 Restrict shutdown, upgrade, and encryption powers to the database owner
• relates to: DERBY-866 Derby User Management Enhancements