[
https://issues.apache.org/jira/browse/DERBY-2206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12466109
]
Daniel John Debrunner commented on DERBY-2206:
----------------------------------------------
This paper (at the bottom of page 40) has some details on the loading of system
classes and restrictions on user class loaders.
"Dynamic Class Loading in the JavaTM Virtual Machine"
http://www.cs.purdue.edu/homes/jv/smc/pubs/liang-oopsla98.pdf
Reading that paper also made it obvious that the api's already treat system
classes differently, e.g. 'ClassLoader.findSystemClass', thus SYS.JRE should
probably map to the concept of system classes as defined by Java.
> Provide complete security model for Java routines
> -------------------------------------------------
>
> Key: DERBY-2206
> URL: https://issues.apache.org/jira/browse/DERBY-2206
> Project: Derby
> Issue Type: New Feature
> Components: Security, SQL
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
>
> Add GRANT/REVOKE mechanisms to control which jar files can be mined for
> user-created objects such as Functions and Procedures. In the future this may
> include Aggregates and Function Tables also. The issues are summarized on the
> following wiki page: http://wiki.apache.org/db-derby/JavaRoutineSecurity.
> Plugin management can be tracked by this JIRA rather than by DERBY-2109. This
> is a master JIRA to which subtasks can be linked.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
