[DERBY-616] create index can fail under the SecurityManager when trying to access files in the tmp folder of a database

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 10.0.2.1, 10.1.1.0, 10.2.1.6
• Fix Version/s: 10.1.3.1, 10.2.1.6
• Component/s: Store
• Assignee: Suresh Thalamati
• Reporter: Daniel John Debrunner
• Created: 12/Oct/05 03:09
• Updated: 12/Jul/06 06:48
• Resolved: 11/Mar/06 02:31

Description

Seen in tests lang/wisconsin.sql and jdbcapi/maxfieldsize.java when running with the network server and the new security policy file that grants permisions on a per-jar basis. Unless permission is given to the network serve code (since it is in the stack) to access temp files in the database the test will fail.

permission java.io.FilePermission "${derby.system.home}${/}wombat${/}tmp${/}-", "read, write, delete";

Most likely the temp files are being accessed in without a privileged block.

Easy to reproduce once the new policy file changes are checked in (see http://wiki.apache.org/db-derby/SecurityManagerTesting) by removing the permission in the derby_tests.policy file and running these tests using the jar files.

Issue Links

• relates to: DERBY-943 nightly test regression in sycat test only on ibm142 jvm