Subject | Re: [Firebird-Architect] External engines - security |
---|---|
Author | Vlad Khorsun |
Post date | 2007-10-21T18:48:02Z |
> Vlad Khorsun wrote:Hmm... why ?
>> USAGE ON LANGUAGE privilege gives ability to CREATE\DECLARE\ALTER\DROP
>> PROCEDURE with this LANGUAGE ?
> Yes, except DROP. DROP is handled by the ways we already use.
>> And not to EXECUTE\SELECT ? Correct ?Good ;)
>>
> Yes.
>> I still not convinced we must implement privilege to call methods of Java classes whichThis is how i understand your phrase :
>> is not registered (DECLARED) as PROCEDURE's
> I don't understand. What you mean "call methods of Java classes which is
> not registered"?
----
Here is how this is handled in Oracle:
dbms_java.grant_permission('USER_NAME',
'SYS:java.lang.RuntimePermission', 'getClassLoader', '' );
So Java code in USER_NAME schema is allowed to call getClassLoader() method.
----
As i understand "getClassLoader" is an Java method name, not registered
external function. Am i wrong ?
Regards,
Vlad