[DERBY-6680] Other jar files may need to be granted permission to read derby.ui.* properties

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 10.11.1.1
• Fix Version/s: 10.11.1.3, 10.12.1.1
• Component/s: Miscellaneous
• Urgency: Normal
• Issue & fix info: Known fix
• Bug behavior facts: Security, Seen in production
• Assignee: Dag H. Wanvik
• Reporter: Richard N. Hillegas
• Created: 30/Jul/14 13:16
• Updated: 09/Sep/16 09:54
• Resolved: 25/Aug/14 17:37

Description

The following properties may be read by LocalizedResource, a class which is included in derby.jar, derbynet.jar, derbyclient.jar, and derbytools.jar:

derby.ui.codeset
derby.ui.locale

A user has tripped across this problem in production. With the user's language settings, the network server fails to come up because the server policy file does not grant the server permission to read these properties. See http://apache-database.10148.n7.nabble.com/Hellow-I-have-some-problem-in-customize-security-policy-with-derby-modified-3-td141002.html

We should adjust server.policy and template.policy accordingly.

Issue Links

• is related to: DERBY-6710 Update documentation for security policy template to match changes in DERBY-6680