[ http://issues.apache.org/jira/browse/DERBY-1241?page=comments#action_12432076 ] Andrew McIntyre commented on DERBY-1241: ----------------------------------------
I think the 'db' part of the URL was missing. This command: svn merge -r 427795:427796 https://svn.apache.org/repos/asf/db/derby/code/trunk/ . produced the expected merge. I committed the original patch and confirmed the above merge command worked as expected. Committed to 10.1 branch with revision 439213. > When booting a database under security manager, boot may fail with message > java.sql.SQLException: Java exception: 'access denied (java.io.FilePermission > for logmirror.ctrl if database was not shutdown cleanly after previous > access > ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: DERBY-1241 > URL: http://issues.apache.org/jira/browse/DERBY-1241 > Project: Derby > Issue Type: Bug > Components: Store > Reporter: Suresh Thalamati > Assigned To: Myrna van Lunteren > Priority: Critical > Fix For: 10.2.1.0 > > Attachments: DERBY-1241_20060801.diff, DERBY-1421_101_20060802.diff, > derby_tests.policy > > > logmirror.ctrl is getting accessed outside the privileged block when the > checkpoint instant is invalid on log factory boot method and cause this > failure on boot if the database was not shutdown cleanly. The reproduction > (see comment) shows that can happens after database creation. > This problem was reported on the derby-dev list by Olav Sandstaa , filing > jira entry for it. > Olav Sandstaa wrote: > > Rick Hillegas <[EMAIL PROTECTED]> wrote: > > > > java.sql.SQLException: Java exception: 'access denied > > (java.io.FilePermission > > /export/home/tmp/derbyjdbc4/DerbyNetClient/TestConnectionMethods/wombat/log/logmirror.ctrl > > read): java.security.AccessControlException'. > > at > > java.security.AccessControlContext.checkPermission(AccessControlContext.java:321) > > at > > java.security.AccessController.checkPermission(AccessController.java:546) > > at java.lang.SecurityManager.checkPermission(SecurityManager.java:532) > > at java.lang.SecurityManager.checkRead(SecurityManager.java:871) > > at java.io.File.exists(File.java:731) > > at > > org.apache.derby.impl.store.raw.log.LogToFile.boot(LogToFile.java:2940) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.boot(BaseMonitor.java:1996) > > at > > org.apache.derby.impl.services.monitor.TopService.bootModule(TopService.java:290) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.startModule(BaseMonitor.java:542) > > at > > org.apache.derby.iapi.services.monitor.Monitor.bootServiceModule(Monitor.java:418) > > at > > org.apache.derby.impl.store.raw.data.BaseDataFileFactory.bootLogFactory(BaseDataFileFactory.java:1762) > > at > > org.apache.derby.impl.store.raw.data.BaseDataFileFactory.setRawStoreFactory(BaseDataFileFactory.java:1218) > > at org.apache.derby.impl.store.raw.RawStore.boot(RawStore.java:250) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.boot(BaseMonitor.java:1996) > > at > > org.apache.derby.impl.services.monitor.TopService.bootModule(TopService.java:290) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.startModule(BaseMonitor.java:542) > > at > > org.apache.derby.iapi.services.monitor.Monitor.bootServiceModule(Monitor.java:418) > > at > > org.apache.derby.impl.store.access.RAMAccessManager.boot(RAMAccessManager.java:987) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.boot(BaseMonitor.java:1996) > > at > > org.apache.derby.impl.services.monitor.TopService.bootModule(TopService.java:290) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.startModule(BaseMonitor.java:542) > > at > > org.apache.derby.iapi.services.monitor.Monitor.bootServiceModule(Monitor.java:418) > > at > > org.apache.derby.impl.db.BasicDatabase.bootStore(BasicDatabase.java:738) > > at org.apache.derby.impl.db.BasicDatabase.boot(BasicDatabase.java:178) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.boot(BaseMonitor.java:1996) > > at > > org.apache.derby.impl.services.monitor.TopService.bootModule(TopService.java:290) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.bootService(BaseMonitor.java:1831) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.startProviderService(BaseMonitor.java:1697) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.findProviderAndStartService(BaseMonitor.java:1577) > > at > > org.apache.derby.impl.services.monitor.BaseMonitor.startPersistentService(BaseMonitor.java:990) > > at > > org.apache.derby.iapi.services.monitor.Monitor.startPersistentService(Monitor.java:541) > > at > > org.apache.derby.impl.jdbc.EmbedConnection.bootDatabase(EmbedConnection.java:1586) > > at > > org.apache.derby.impl.jdbc.EmbedConnection.<init>(EmbedConnection.java:216) > > at > > org.apache.derby.impl.jdbc.EmbedConnection30.<init>(EmbedConnection30.java:72) > > at > > org.apache.derby.impl.jdbc.EmbedConnection40.<init>(EmbedConnection40.java:48) > > at > > org.apache.derby.jdbc.Driver40.getNewEmbedConnection(Driver40.java:62) > > at org.apache.derby.jdbc.InternalDriver.connect(InternalDriver.java:199) > > at org.apache.derby.impl.drda.Database.makeConnection(Database.java:231) > > at > > org.apache.derby.impl.drda.DRDAConnThread.getConnFromDatabaseName(DRDAConnThread.java:1147) > > at > > org.apache.derby.impl.drda.DRDAConnThread.verifyUserIdPassword(DRDAConnThread.java:1125) > > at > > org.apache.derby.impl.drda.DRDAConnThread.parseSECCHK(DRDAConnThread.java:2709) > > at > > org.apache.derby.impl.drda.DRDAConnThread.parseDRDAConnection(DRDAConnThread.java:987) > > at > > org.apache.derby.impl.drda.DRDAConnThread.processCommands(DRDAConnThread.java:830) > > at > > org.apache.derby.impl.drda.DRDAConnThread.run(DRDAConnThread.java:236) > > > > The security exception is raised when Derby tries to get access to the > > log/logmirror.ctrl file during the second startup of the database. I > > would have expected that since this file was created earlier during > > the initial startup of the test, the test should already have the > > required security permissions to access it during the second startup? > > > > Anyway, the best solution to this problem would be to be able to reuse > > functionality that already might exist in the test framework. Any > > suggestions are appreciated. > > > > Regards, > > Olav > > > By looking at the stack it looks like log/logmirror.ctrl is not getting > accessed in the privileged block at line 2940 in LogToFile.java. > if (checkpointInstant == LogCounter.INVALID_LOG_INSTANT && > getMirrorControlFileName().exists()) > Not sure how you got checkpointInstant to be INVALID , may be your test > program might have exited before a first valid checkpoint. Any one fixing > this bugs should make sure that is the case. > In any case call to exists should have been > privExists(getMirrorControlFileName()). > Please file a Jira entry with information on how to reproduce this bug. > Thanks > -suresh -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira
