[DERBY-6717] Policies with multiple SystemPermissions are not handled well

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 10.11.1.1
• Fix Version/s: 10.12.1.1
• Component/s: Services
• Assignee: Knut Anders Hatlen
• Reporter: Knut Anders Hatlen
• Created: 27/Aug/14 11:36
• Updated: 09/Sep/16 09:53
• Resolved: 29/Aug/14 08:24

Description

Rick noted in DERBY-6648 that if you wanted to grant both SystemPermission("engine", "monitor") and SystemPermission("engine", "usederbyinternals") to a code base, the following would work:

permission org.apache.derby.security.SystemPermission "engine", "monitor,usederbyinternals";

However, the following does not work:

permission org.apache.derby.security.SystemPermission "engine", "usederbyinternals";
permission org.apache.derby.security.SystemPermission "engine", "monitor";

Issue Links

• relates to: DERBY-6648 Application code should not be able to call ContextService.getContextOrNull()