[
https://issues.apache.org/jira/browse/DERBY-6680?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14101169#comment-14101169
]
Dag H. Wanvik commented on DERBY-6680:
--------------------------------------
Thanks for looking at this, Myrna. Your are right about the normal usage
pattern, of course. But we don't control how the users make their class paths,
so warnings might still be useful? I suspect more users than me for simplicity
use the same path everywhere.. In the comment I suggested, I did add the
provision "if present", I might amplify that. Even if "derbyclient.jar" isn't
present the server's class path, I suppose derbytools could be? We do encourage
people to use sysinfo. This would cause the same issue as derbyclient's
presence.
The server tries to read derby.ui.* in NetworkServerControlImpl#init due to
this line ca line 467:
{code}
// adjust the application in accordance with derby.ui.locale and
derby.ui.codeset
langUtil = new LocalizedResource(null,null,DRDA_PROP_MESSAGES);
{code}
> Other jar files may need to be granted permission to read derby.ui.*
> properties
> -------------------------------------------------------------------------------
>
> Key: DERBY-6680
> URL: https://issues.apache.org/jira/browse/DERBY-6680
> Project: Derby
> Issue Type: Bug
> Affects Versions: 10.11.1.1
> Reporter: Rick Hillegas
> Assignee: Dag H. Wanvik
> Attachments: derby-6680.diff
>
>
> The following properties may be read by LocalizedResource, a class which is
> included in derby.jar, derbynet.jar, derbyclient.jar, and derbytools.jar:
> {noformat}
> derby.ui.codeset
> derby.ui.locale
> {noformat}
> A user has tripped across this problem in production. With the user's
> language settings, the network server fails to come up because the server
> policy file does not grant the server permission to read these properties.
> See
> http://apache-database.10148.n7.nabble.com/Hellow-I-have-some-problem-in-customize-security-policy-with-derby-modified-3-td141002.html
> We should adjust server.policy and template.policy accordingly.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
