You are viewing a plain text version of this content. The canonical link for it is here.

Posted to derby-dev@db.apache.org by "Knut Anders Hatlen (JIRA)" <ji...@apache.org> on 2014/06/20 13:43:25 UTC

[jira] [Created] (DERBY-6629) Restrict privileged operation in CreateXMLFile

Knut Anders Hatlen created DERBY-6629:
-----------------------------------------

             Summary: Restrict privileged operation in CreateXMLFile
                 Key: DERBY-6629
                 URL: https://issues.apache.org/jira/browse/DERBY-6629
             Project: Derby
          Issue Type: Bug
          Components: Tools
    Affects Versions: 10.10.2.0
            Reporter: Knut Anders Hatlen
            Assignee: Knut Anders Hatlen


The PlanExporter tool has a public method CreateXMLFile.writeTheXMLFile(). This method opens a FileOutputStream in a privileged block. We should change this so that unprivileged code cannot use the method to write files using derbytools.jar's privileges.



--
This message was sent by Atlassian JIRA
(v6.2#6252)