[DERBY-5590] Document optional modifyThreadGroup permssion in java 2 security permissions

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.9.1.0
• Fix Version/s: 10.9.1.0
• Component/s: Documentation
• Assignee: Camilla Haase
• Reporter: Katherine Marsden
• Created: 28/Jan/12 00:39
• Updated: 25/May/12 14:01
• Resolved: 22/May/12 18:04

Description

With DERBY3618 and DERBY-4856 if modifyThreadGroup privileges are available, DERBY will produce a thread dump in the derby.log upon asserts or session level SQLExceptions
The two permissions that will be needed to dump the thread stack traces are:

permission java.lang.RuntimePermission "getStackTrace";
permission java.lang.RuntimePermission "modifyThreadGroup";

These should be mentioned in the optional permissions at:
http://db.apache.org/derby/docs/10.8/devguide/cdevbabejgjd.html

These optional permissions will allow extended diagnostics, specifically the stack traces of all threads to be dumped to derby.log on severe errors and when derby.stream.error.extendedDiagSeverityLevel is set.

It would be good to mention them here too:

http://db.apache.org/derby/docs/10.8/ref/rrefproperextdiagsevlevel.html