You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-dev@db.apache.org by "Bryan Pendleton (JIRA)" <ji...@apache.org> on 2014/06/24 03:03:19 UTC
[jira] [Commented] (DERBY-6629) Restrict privileged operation in
CreateXMLFile
[ https://issues.apache.org/jira/browse/DERBY-6629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14041553#comment-14041553 ]
Bryan Pendleton commented on DERBY-6629:
----------------------------------------
Seems perfectly reasonable to me. I suspect I just called the internal method
from the test code without really giving it any thought. Going through the
public interface is far superior.
> Restrict privileged operation in CreateXMLFile
> ----------------------------------------------
>
> Key: DERBY-6629
> URL: https://issues.apache.org/jira/browse/DERBY-6629
> Project: Derby
> Issue Type: Bug
> Components: Tools
> Affects Versions: 10.10.2.0
> Reporter: Knut Anders Hatlen
> Assignee: Knut Anders Hatlen
> Attachments: d6629-1a.diff
>
>
> The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method opens a FileOutputStream in a privileged block. We should change this so that unprivileged code cannot use the method to write files using derbytools.jar's privileges.
--
This message was sent by Atlassian JIRA
(v6.2#6252)