[
https://issues.apache.org/jira/browse/DERBY-2206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12466193
]
Daniel John Debrunner commented on DERBY-2206:
----------------------------------------------
Interesting ... I think it shows that the concept of System class is not what I
thought, it's as you say classes from CLASSPATH.
I don't think we can assume that null class loader means JRE class, that's
explicit in the Java doc for Class.getClassLoader.
Or at least if getClassLoader() returns null then it is the bootstraploader but
you can't guarantee an implementation will use null for the bootstraploader.
I'm pretty sure the IBM vms do not use null.
The "Inside Java 2 Platform Security, Second Edition" makes the claim on page
43 that classes loaded by the bootstrap loader do have 'null' for a class
loader. They base the claim on the "Dynamic Class Loading in the JavaTM Virtual
Machine" paper, but I can't see any evidence in that paper, and that statement
contradicts the javadoc.
(the same page 43 also covers that "system classes" as defined by the JRE are
really application classes)
> Provide complete security model for Java routines
> -------------------------------------------------
>
> Key: DERBY-2206
> URL: https://issues.apache.org/jira/browse/DERBY-2206
> Project: Derby
> Issue Type: New Feature
> Components: Security, SQL
> Reporter: Rick Hillegas
> Fix For: 10.3.0.0
>
>
> Add GRANT/REVOKE mechanisms to control which jar files can be mined for
> user-created objects such as Functions and Procedures. In the future this may
> include Aggregates and Function Tables also. The issues are summarized on the
> following wiki page: http://wiki.apache.org/db-derby/JavaRoutineSecurity.
> Plugin management can be tracked by this JIRA rather than by DERBY-2109. This
> is a master JIRA to which subtasks can be linked.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
