Derby
  1. Derby
  2. DERBY-5590

Document optional modifyThreadGroup permssion in java 2 security permissions

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 10.9.1.0
    • Fix Version/s: 10.9.1.0
    • Component/s: Documentation
    • Labels:
      None

      Description

      With DERBY3618 and DERBY-4856 if modifyThreadGroup privileges are available, DERBY will produce a thread dump in the derby.log upon asserts or session level SQLExceptions
      The two permissions that will be needed to dump the thread stack traces are:

      permission java.lang.RuntimePermission "getStackTrace";
      permission java.lang.RuntimePermission "modifyThreadGroup";

      These should be mentioned in the optional permissions at:
      http://db.apache.org/derby/docs/10.8/devguide/cdevbabejgjd.html

      These optional permissions will allow extended diagnostics, specifically the stack traces of all threads to be dumped to derby.log on severe errors and when derby.stream.error.extendedDiagSeverityLevel is set.

      It would be good to mention them here too:

      http://db.apache.org/derby/docs/10.8/ref/rrefproperextdiagsevlevel.html

      1. DERBY-5590.diff
        2 kB
        Kim Haase
      2. DERBY-5590.stat
        0.1 kB
        Kim Haase
      3. DERBY-5590.zip
        7 kB
        Kim Haase

        Activity

        Hide
        Kim Haase added a comment -

        Kathy, thank you for explaining this issue so clearly. I'm attaching DERBY-5590.diff, DERBY-5590.stat, and DERBY-5590.zip, with changes to the two files you mentioned:

        M src/devguide/cdevbabejgjd.dita
        M src/ref/rrefproperextdiagsevlevel.dita

        Please let me know whether further changes are needed.

        Show
        Kim Haase added a comment - Kathy, thank you for explaining this issue so clearly. I'm attaching DERBY-5590 .diff, DERBY-5590 .stat, and DERBY-5590 .zip, with changes to the two files you mentioned: M src/devguide/cdevbabejgjd.dita M src/ref/rrefproperextdiagsevlevel.dita Please let me know whether further changes are needed.
        Hide
        Rick Hillegas added a comment -

        Hi Kim,

        Thanks for the patch. These changes look straightforward and correct to me. +1.

        Show
        Rick Hillegas added a comment - Hi Kim, Thanks for the patch. These changes look straightforward and correct to me. +1.
        Hide
        Kim Haase added a comment -

        Thanks very much, Rick.

        Committed patch DERBY-5590.diff to documentation trunk at revision 1341573.

        Show
        Kim Haase added a comment - Thanks very much, Rick. Committed patch DERBY-5590 .diff to documentation trunk at revision 1341573.
        Hide
        Kim Haase added a comment -

        Changes have appeared in Latest Alpha Manuals.

        Show
        Kim Haase added a comment - Changes have appeared in Latest Alpha Manuals.

          People

          • Assignee:
            Kim Haase
            Reporter:
            Kathey Marsden
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development