permission java.io.FilePermission "<directory>", "read,write";and for the trace directory itself, the policy must allow
permission java.io.FilePermission "<tracedirectory>${/}-", "write";
See Customizing the Network Server's security policy for information about customizing the Network Server's security policy.
derby.drda.traceDirectory=tracefiledirectory
If the derby.system.home property has been set, it is the default. Otherwise, the default is the current directory.
derby.drda.traceDirectory=c:/Derby/trace
Dynamic. You can change system values by using commands after the Network Server has been started.