private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException
IOExceptionClassNotFoundExceptionString name
Note that the name is not a "normalized" Authorization Identifier.
This is due to peculiarities of the Java Security Runtime, which
compares a javax.security.auth.Subject's Principals
against the literal Principal name as declared in the policy files,
and not against the return value of method getName().
So, a normalization of names within SystemPrincipal doesn't affect
permission checking by the SecurityManager.
In order for a javax.security.auth.Subject to be
granted permissions on the basis Authorization Identifier rules, e.g.,
for a Subject authenticated as edWard to fall under a policy clause
declared for EDWARD, the Subject has to be constructed (or augmented)
with both the literal name and the normalized Authorization Identifier.
As an alternative approach, class SystemPrincipal could
implement the non-standard interface
com.sun.security.auth.PrincipalComparator, which declares
a method implies(Subject) that would allow for Principals
to match Subjects on the basis of normalized Authorization Identifiers.
But then we'd be relying upon non-standard Security Runtime behaviour.
String host
int portNumber
String tracingDirectory
boolean logStatus
boolean traceStatus
NetworkServerControl server
private void readObject(ObjectInputStream inputStream) throws ClassNotFoundException, IOException
This implementation differs from the default one by initiating state validation of the object created.
ClassNotFoundException - if instantiating a class failsIOException - if reading from the stream failsint maxStatements
A value of 0 disables statement caching, negative values
are not allowed. The default is that caching is disabled.
int loginTimeout
String databaseName
String description
String dataSourceName
int portNumber
String serverName
String user
password property. This password property may or may not
be declared transient, and therefore may be serialized to a file in
clear-text, care must taken by the user to prevent security breaches.
Derby-406 fixshort securityMechanism
BasicClientDataSource40.getUpgradedSecurityMechanism(java.lang.String).
Therefore, need to keep track if the securityMechanism has been
explicitly set.boolean retrieveMessageText
String traceFile
String traceDirectory
boolean traceFileAppend
String password
int sslMode
boolean createDatabase
boolean shutdownDatabase
String connectionAttributes
int traceLevel
String description
String dataSourceName
String databaseName
String connectionAttributes
BasicEmbeddedDataSource40.setConnectionAttributes(java.lang.String).String createDatabase
BasicEmbeddedDataSource40.setCreateDatabase(java.lang.String).String shutdownDatabase
BasicEmbeddedDataSource40.setShutdownDatabase(java.lang.String).boolean attributesAsPassword
String shortDatabaseName
shortDatabaseName has attributes of databaseName
stripped off. See BasicEmbeddedDataSource40.databaseName.String password
String user
int loginTimeout
private void readObject(ObjectInputStream inputStream) throws ClassNotFoundException, IOException
This implementation differs from the default one by initiating state validation of the object created.
ClassNotFoundException - if instantiating a class failsIOException - if reading from the stream failsint maxStatements
A value of 0 disables statement caching, negative values
are not allowed. The default is that caching is disabled.
private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException
IOExceptionClassNotFoundExceptionprivate void writeObject(ObjectOutputStream s) throws IOException
IOExceptionString actions
DatabasePermission.getActions().private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException
IOExceptionClassNotFoundExceptionString actions
Restriction _leftChild
Restriction _rightChild
Restriction _leftChild
Restriction _rightChild
Apache Derby 10.12 API Documentation - Copyright © 2004,2015 The Apache Software Foundation. All Rights Reserved.