[DERBY-701] Java 2 security policy file examples don't work -- are missing a needed line

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 10.1.2.1
• Fix Version/s: 10.1.3.1
• Component/s: Documentation
• Assignee: Unassigned
• Reporter: Jean T. Anderson
• Created: 11/Nov/05 06:43
• Updated: 26/Apr/06 06:12
• Resolved: 26/Apr/06 06:12

Description

These security policy file examples don't work as is:

http://db.apache.org/derby/docs/dev/devguide/rdevcsecure871406.html
http://db.apache.org/derby/docs/dev/devguide/rdevcsecure871422.html
http://db.apache.org/derby/docs/dev/devguide/rdevcsecure871439.html

Each example needs this additional line:

permission java.io.FilePermission "${derby.system.home}","read";

The email thread is here:

http://mail-archives.apache.org/mod_mbox/db-derby-user/200511.mbox/[e-mail]%3e

To show one of the examples, here is the current text for Example 1:

grant codeBase "file://f:/derby/lib/derby.jar" {
permission java.lang.RuntimePermission "createClassLoader";
permission java.util.PropertyPermission "derby.*", "read";
permission java.io.FilePermission "${derby.system.home}${/}-", "read,write,delete";
};

It needs to be this instead:

grant codeBase "file://f:/derby/lib/derby.jar" {
permission java.lang.RuntimePermission "createClassLoader";
permission java.util.PropertyPermission "derby.*", "read";
permission java.io.FilePermission "${derby.system.home}","read";
permission java.io.FilePermission "${derby.system.home}${/}-","read,write,delete";
};