[ 
https://issues.apache.org/jira/browse/DERBY-6741?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14626993#comment-14626993
 ] 

Rick Hillegas commented on DERBY-6741:
--------------------------------------

Hi Bryan,

There is a similar code block in 
NoDBInternalsPermissionTest.test_005_EmbedConnection_getLCC(). There the call 
to getConnection() is inside the try block. Could you move the getConnection() 
in NoDBInternalsPermissionTest.test_002_EmbedConnection() inside the try block 
and see if that makes the problem go away on your machine?

Thanks,
-Rick

> User code can get the ContextManager from an EmbedConnection
> ------------------------------------------------------------
>
>                 Key: DERBY-6741
>                 URL: https://issues.apache.org/jira/browse/DERBY-6741
>             Project: Derby
>          Issue Type: Bug
>          Components: JDBC, Services
>            Reporter: Rick Hillegas
>            Assignee: Rick Hillegas
>             Fix For: 10.12.0.0
>
>         Attachments: derby-6741-01-aa-usederbyinternals.diff, derby.log, 
> error-stacktrace.out
>
>
> EmbedConnection.getContextManager() is a public method. Exposing internals 
> like the ContextManager is a security risk.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to