It appears that the JdbcRealm.getPermissions is leaking PreparedStatements and ResultSets. These are both created inside a for loop, but the finally block with close statements is outside of the loop. I am attaching a patch to fix this, should I create a JIRA issue?
Note: In the patch I took different approaches to solving the two different leaks. For the PreparedStatement I simply moved the creation outside of the loop it doesn¹t seem necessary to create a new one each time. For the ResultSet, I moved the close statement into a finally block inside the loop. Thanks, Jared
