db-derby-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rick Hillegas <rick.hille...@oracle.com>
Subject Re: java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "getClassLoader")
Date Wed, 23 Jul 2014 13:15:42 GMT
Hi George,

Some responses inline...

On 7/22/14 12:21 PM, spykee wrote:
> Hi Rick,
> I tried to start it from the console&  Netbeans, but I encountered the same
> errors ( I downloaded the latest Apache Derby, ** - I'm using*
> Windows 8.1* ).
> What I did was :
> 1. Go on Apache Website and download the latest bin version.
> 2. Execute startNetworkServer.bat from the /bin directory.
The sample scripts in the bin directory boot the NetworkServer as the 
JVM's main entry point. When you boot Derby this way, Derby installs a 
SecurityManager using Derby's default server policy. That's the one I 
attached to my previous response. This is described in the Server Guide 
section titled "Basic Network Server security policy": 

The security exception is raised because you have not granted sufficient 
privilege to other, non-Derby code on your stack. In this case, the 
log4j jar file. You need to do one of the following:

1) Boot the NetworkServer using your own policy file, based on the 
policy file I attached to my previous message. Instructions on how to 
customize this policy file can be found in the Server Guide section 
titled "Network Server security". You will need to add a block of grants 
for log4j. I don't know what other permissions it needs.

2) Or turn off the SecurityManager as described here: 

3) Or bring up the NetworkServer programatically as described here: 
> 3. Execute these with success( I tried both ways : using ij from console and
> Netbeans directly, but same errors):
> * CALL
> sqlj.install_jar('C:\\rlibraryStoredProcedures.jar','APP.rlibraryStoredProcedures',0);
> * CALL
> SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY('derby.database.classpath','APP.rlibraryStoredProcedures');
> * CREATE PROCEDURE deltaCollectorInsert(IN deltaColumn varchar(25),IN val1
> VARCHAR(5000), IN val2 varchar(5000),IN tableName varchar(25),
>   IN tableCode varchar(25),IN pkColumn varchar(25), IN pkValue INT)
> EXTERNAL NAME'com.rlibary.storedproc.DeltaCollector.deltaCollectorInsert';
> 4. Make a call to the stored procedure:
> * CALL
> deltaCollectorInsert('book','val1','val1','table','tableCode','pkColumn',1);
> Observe the errors from the attached file (derby_errors.txt)
> derby_errors.txt
> <http://apache-database.10148.n7.nabble.com/file/n140909/derby_errors.txt>
> :
> See also the attached Java class with the stored procedure:
> *  DeltaCollector.java
> <http://apache-database.10148.n7.nabble.com/file/n140909/DeltaCollector.java>
> See my java.policy file from my JRE ( Java 8.0) in case this is important:
> *  java.policy
> <http://apache-database.10148.n7.nabble.com/file/n140909/java.policy>
> Even with those errors my stored procedure is executed ( I ran it directly
> from console in order to insert rows in a single table), but I encountered a
> problem when using transaction between 2 tables.
> * I have an UPDATE trigger on table t1 which calls my mentioned stored
> procedure( which will insert a row in table2, @see my attached Java class).
> When I try to make an update, I encounter this.
> ******************************
> Error code 20000, SQL state 38000
> Update command failed: The exception 'java.sql.SQLException: Cannot issue
> rollback in a nested connection when there is a pending operation in the
> parent connection.' was thrown while evaluating an expression.
> *****************************
> Can you please help me with this ?
You cannot commit or rollback inside a trigger. This is described by the 
Reference Guide section on "CREATE TRIGGER" (about 2/3s of the way down 
the page, under the heading "triggeredSQLStatement"): 

Hope this helps,
> Cheers,
> George
> --
> View this message in context: http://apache-database.10148.n7.nabble.com/java-security-AccessControlException-access-denied-java-lang-RuntimePermission-getClassLoader-tp140900p140909.html
> Sent from the Apache Derby Users mailing list archive at Nabble.com.

View raw message