[Fwd: Re: Creating a database - network security]

[David Van Couvering <Da...@Sun.COM>]

How are they blocked from running the program?  Is it being loaded as an 
applet and they are running into security exceptions?  Or is a firewall 
blocking them somehow?  What exactly is happening?

If it's the former, the way you handle this is by getting a certificate 
and signing the derby jar file with this certificate.  The user then 
gets a popup asking if they trust you and will accept the certificate. 
Depending on your set of customers, they may want a highly verified 
certificate from a Certificate Authority like Verisign, or they'll be 
happy with one you created yourself.

But, again, I don't even know if that's your problem :)

David

Rick Strong wrote:
> Greetings,
> 
> I've built a product based on Derby, and I've run into a problem. The 
> product creates and modifies r/w databases, and in distributing the 
> product to people working in very secure network situations I find that 
> even people who are empowered to install software are frequently blocked 
> from running the program, which creates a db on the fly on its first run.
> 
> Are there any interesting documents or ideas on minimal network 
> permissions needed to create/access/modify Derby databases in a 
> relatively paranoid network context?
> 
> Thanks,
> 
> Rick Strong
> rick.strong@med.nyu.edu