|Subject||Re: [Firebird-Architect] External engines - security|
> Vlad Khorsun wrote:Hmm... why ?
>> USAGE ON LANGUAGE privilege gives ability to CREATE\DECLARE\ALTER\DROP
>> PROCEDURE with this LANGUAGE ?
> Yes, except DROP. DROP is handled by the ways we already use.
>> And not to EXECUTE\SELECT ? Correct ?Good ;)
>> I still not convinced we must implement privilege to call methods of Java classes whichThis is how i understand your phrase :
>> is not registered (DECLARED) as PROCEDURE's
> I don't understand. What you mean "call methods of Java classes which is
> not registered"?
Here is how this is handled in Oracle:
'SYS:java.lang.RuntimePermission', 'getClassLoader', '' );
So Java code in USER_NAME schema is allowed to call getClassLoader() method.
As i understand "getClassLoader" is an Java method name, not registered
external function. Am i wrong ?