Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-3491

Change SystemPermission to be a two arguement permission with a name (object the permission is on) and an action.

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 10.4.1.3
    • Services
    • None
    • Security

    Description

      With the additional system permissions proposed in DERBY-3462 I wonder if it makes sense to change the style of names & actions in SystemPermission.

      Today a "shutdown" name is proposed and potential for future "shutdownEngine" and "shutdownServer" with no actions.

      DERBY-3462 is proposing names of jmxControl, serverControl, engineControl etc also with no actions.

      Looking at the standard Permission class it seems the name is meant to represent an object that the permission applies to and action represent actions on that object.
      Thus it would seem to make more sense and be consistent with other Permissions to have:

      name=server action=control | monitor | shutdown
      name=engine action=control | monitor | shutdown
      name=jmx action=control

      Attachments

        1. d3491_v01_diff.txt
          12 kB
          Daniel John Debrunner

        Issue Links

          blocks

          Sub-task - The sub-task of the issue DERBY-3462 Require new permissions in o.a.d.security.SystemPermission to allow control to Derby's JMX management and to ensure information is not leaked through JMX

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. DERBY-3614 Granted SystemPermissions are ignored when granted later with same target and different action

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. DERBY-2109 System privileges

          • Major - Major loss of function.
          • Open

          Activity

            People

              djd Daniel John Debrunner
              djd Daniel John Debrunner
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: