Hi All,

Currently we having  orbit bundle, "h2-database-engine" which uses
h2-1.2.140.jar directly from maven repository and create a OSGi bundle
using it. But we need to modify the H2 code to fix the Stratos issue [1].

The issue was,  Last user login details (except password) is shown in H2 db
console, to other tenants as well.  But this is how H2 console has designed
to work and it's not a issue in H2 console. It sorted the last recently
used connections in a configuration file called .h2.server.properties.
Other than this file , HashMap has used to hold the recently accessed
connection details. When H2 Console getting loaded it first look in this
connection HashMap, if its size is not zero then recent access connections
are loaded to Console from this Map, if its size is zero then it loads the
properties (driver, jdbcUrl, user) from aforementioned configuration
property file '.h2.server.properties'. Therefore this is an expected
behavior in DB Console where it is designed to be.

But we cannot allow this feature in SLive since it is not good in security
vice and it's kind of breaking the tenant awareness. So I modified the H2
code to remove this behaviour and going to add it as a new dependency and
refer it from "h2-database-engine" orbit bundle rather using h2-jar
directly from maven repository.

If there are any objections to adding H2 as new dependency , please let me
know..

[1]. https://wso2.org/jira/browse/STRATOS-2051

Regards,
Dinusha.
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to