[DERBY-6741] User code can get the ContextManager from an EmbedConnection

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 10.12.1.1
• Component/s: JDBC, Services
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Richard N. Hillegas
• Reporter: Richard N. Hillegas
• Created: 16/Sep/14 23:09
• Updated: 17/Jul/15 00:22
• Resolved: 21/Jan/15 23:36

Description

EmbedConnection.getContextManager() is a public method. Exposing internals like the ContextManager is a security risk.

Issue Links

• is related to: DERBY-6648 Application code should not be able to call ContextService.getContextOrNull()