Re: derby security

[Rajesh Kartha]

Hello,

The 'derby.connection.requireAuthentication' need to set as system 
property (using -D)  while running your application
or as a database property (within the database).
More info at:
http://db.apache.org/derby/docs/dev/tuning/rtunproper27467.html

Also, there is some discussion on this in one of the JIRA issues at:
http://issues.apache.org/jira/browse/DERBY-1711

From you example you seem to pass the property as Connection properties 
which has a limited scope.

Hope the above helps. Do post to the list should you have further questions.

-Rajesh


Hong Ji wrote:

The ij is still able to access the database without user name and 
password.
 
I set properties and create new database in java as following:
 
        m_dbProperties = new Properties();
        m_dbProperties.put("user", "admin");
        m_dbProperties.put("password", "adminadmin");
        m_dbProperties.put(" derby.driver", 
"org.apache.derby.jdbc.EmbeddedDriver");
        m_dbProperties.put("derby.url", "jdbc:derby:");
        m_dbProperties.put("derby.connection.requireAuthentication ", 
"true");
 
        m_dbProperties.put("create", "true");
        
        dbConnection = DriverManager.getConnection(dbUrl, m_dbProperties);
      
Is something still not set up properly?
 
Thanks.
 
Hong
 
 
 
On 8/29/06, *Francois Orsini* <[EMAIL PROTECTED] 
<mailto:[EMAIL PROTECTED]>> wrote:

    and make sure to re-boot the database or derby instance for the
    'derby.connection.requireAuthentication' property to be taken into
    account...It is a static property.


    On 8/29/06, *Fernanda Pizzorno* <[EMAIL PROTECTED]
    <mailto:[EMAIL PROTECTED]>> wrote:

        To enable user authentication in Derby you must set the
        /derby.connection.requireAuthentication/ property to true.

        You can find more information about derby security on "Derby and
        Security" in "/Derby Developer's Guide"
        ( http://db.apache.org/derby/docs/dev/devguide/
        <http://db.apache.org/derby/docs/dev/devguide/>).

        Fernanda
        /
        Hong Ji wrote:
Hello,

I created a derby database in Java with user name and password.
However, the
ij tool can open and view the database without input of the
        user name or
password.

So how could a derby database be protected? Anyone can use ij
        to view the
database?

Thanks.

Hong Ji