[DERBY-7014] ij requires excessive PropertyPermissions

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 10.15.1.3
• Component/s: Tools
• Urgency: Normal
• Bug behavior facts: Security
• Assignee: Unassigned
• Reporter: Richard N. Hillegas
• Created: 28/Oct/18 14:53
• Updated: 28/Oct/18 14:55

Description

The following broad permission...

permission java.util.PropertyPermission "*", "read,write";

...must be granted to derbytools.jar because of the following stanza from initFromEnvironment() in ij.jj:

		// load all protocols specified via properties
		//
        Properties p = AccessController.doPrivileged(new PrivilegedAction<Properties>() {
          	public Properties run() {
              	return System.getProperties();
            }
        });

We should not have to grant derbytools.jar the power to read and overwrite all system properties.

Issue Links

• relates to: DERBY-3547 Create a utility that generates a security policy file for Derby's tests