Re: derby security

[Hong Ji]

The ij is still able to access the database without user name and password.

 

I set properties and create new database in java as following:

 

        m_dbProperties = new Properties();
        m_dbProperties.put("user", "admin");
        m_dbProperties.put("password", "adminadmin");
        m_dbProperties.put(" derby.driver", "org.apache.derby.jdbc.EmbeddedDriver");
        m_dbProperties.put("derby.url", "jdbc:derby:");
        m_dbProperties.put("derby.connection.requireAuthentication ", "true");
 

        m_dbProperties.put("create", "true");
        
        dbConnection = DriverManager.getConnection(dbUrl, m_dbProperties);
      
Is something still not set up properly?

 

Thanks.

 

Hong

 

 

 

On 8/29/06, Francois Orsini <[EMAIL PROTECTED]> wrote:

and make sure to re-boot the database or derby instance for the 'derby.connection.requireAuthentication' property to be taken into account...It is a static property.

On 8/29/06, Fernanda Pizzorno <[EMAIL PROTECTED] > wrote:

To enable user authentication in Derby you must set the
/derby.connection.requireAuthentication/ property to true.

You can find more information about derby security on "Derby and
Security" in "/Derby Developer's Guide"
( http://db.apache.org/derby/docs/dev/devguide/ ).

Fernanda
/
Hong Ji wrote:
> Hello,
>
> I created a derby database in Java with user name and password.
> However, the
> ij tool can open and view the database without input of the user name or
> password.
>
> So how could a derby database be protected? Anyone can use ij to view the
> database?
>
> Thanks.
>
> Hong Ji
>