Uploaded image for project: 'Derby'
  1. Derby
  2. DERBY-709

SecurityException thrown when passing a relative path name when backing up database

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 10.0.2.0, 10.1.1.0, 10.2.1.6
    • 10.2.1.6
    • Store
    • None
    • Security

    Description

      CALL SYSCS_UTIL.SYSCS_BACKUP_DATABASE('extinout/bkup1');
      ERROR 38000: The exception 'java.security.AccessControlException: access denied
      (java.util.PropertyPermission user.dir read)' was thrown while evaluating an exp
      ression)

      Can be seen in the store/encryptionKey.sql test, modify the _app.properties file to enable the security manager.

      Due to logging messages using File.getCanonicalPath in RawStore.java, lines 675 and 686.

      Possible solutions:

      • use a privileged block and required user.dir permission granted to user.dir to backup to a relative directory
      • use a privileged block,if a security exception is thrown then just display the relative name, otherwise display the full name. This would allow backups to succeed without requiring granting additional permissions to derby.jar
      • just log the relative path

      Attachments

        1. derby-709_latest.diff
          4 kB
          Suresh Thalamati
        2. derby-709.diff
          29 kB
          Suresh Thalamati

        Activity

          People

            tsuresh Suresh Thalamati
            djd Daniel John Debrunner
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: