Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-5590

Document optional modifyThreadGroup permssion in java 2 security permissions

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 10.9.1.0
    • Fix Version/s: 10.9.1.0
    • Component/s: Documentation
    • Labels:
      None

      Description

      With DERBY3618 and DERBY-4856 if modifyThreadGroup privileges are available, DERBY will produce a thread dump in the derby.log upon asserts or session level SQLExceptions
      The two permissions that will be needed to dump the thread stack traces are:

      permission java.lang.RuntimePermission "getStackTrace";
      permission java.lang.RuntimePermission "modifyThreadGroup";

      These should be mentioned in the optional permissions at:
      http://db.apache.org/derby/docs/10.8/devguide/cdevbabejgjd.html

      These optional permissions will allow extended diagnostics, specifically the stack traces of all threads to be dumped to derby.log on severe errors and when derby.stream.error.extendedDiagSeverityLevel is set.

      It would be good to mention them here too:

      http://db.apache.org/derby/docs/10.8/ref/rrefproperextdiagsevlevel.html

        Attachments

        1. DERBY-5590.zip
          7 kB
          Kim Haase
        2. DERBY-5590.stat
          0.1 kB
          Kim Haase
        3. DERBY-5590.diff
          2 kB
          Kim Haase

          Activity

            People

            • Assignee:
              chaase3 Kim Haase
              Reporter:
              kmarsden Kathey Marsden
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: