Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-6680

Other jar files may need to be granted permission to read derby.ui.* properties

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 10.11.1.1
    • Fix Version/s: 10.11.1.3, 10.12.1.1
    • Component/s: Miscellaneous
    • Labels:
      None
    • Urgency:
      Normal
    • Issue & fix info:
      Known fix
    • Bug behavior facts:
      Security, Seen in production

      Description

      The following properties may be read by LocalizedResource, a class which is included in derby.jar, derbynet.jar, derbyclient.jar, and derbytools.jar:

      derby.ui.codeset
      derby.ui.locale
      

      A user has tripped across this problem in production. With the user's language settings, the network server fails to come up because the server policy file does not grant the server permission to read these properties. See http://apache-database.10148.n7.nabble.com/Hellow-I-have-some-problem-in-customize-security-policy-with-derby-modified-3-td141002.html

      We should adjust server.policy and template.policy accordingly.

        Attachments

        1. derby-6680b.diff
          2 kB
          Dag H. Wanvik
        2. derby-6680-2b.diff
          9 kB
          Dag H. Wanvik
        3. derby-6680-2.diff
          9 kB
          Dag H. Wanvik
        4. derby-6680.diff
          2 kB
          Dag H. Wanvik

          Issue Links

            Activity

              People

              • Assignee:
                dagw Dag H. Wanvik
                Reporter:
                rhillegas Rick Hillegas
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: