Fix for issue 27 - JPA TCK - Start derby with a security policy

jakartaee · Jan 21, 2019 · 6eed9a3 · 6eed9a3
1 parent 6e05bf3
commit 6eed9a3
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 2 deletions.
diff --git a/docker/jpatck.sh b/docker/jpatck.sh
@@ -62,7 +62,7 @@ mkdir -p $TCK_HOME/jpatckreport/jpatck
 mkdir -p $TCK_HOME/jpatckwork/jpatck
 
 cd $TCK_HOME/glassfish5/glassfish/bin
-./asadmin start-database --dbport 1527
+./asadmin start-database --dbhome $TCK_HOME/glassfish5/glassfish/databases --dbport 1527 --jvmoptions '-Djava.security.manager -Djava.security.policy=$TS_HOME/bin/security.policy'
 
 cd $TS_HOME/bin
 ant -f initdb.xml

diff --git a/docker/scripts/tcks/jpatck.sh b/docker/scripts/tcks/jpatck.sh
@@ -47,7 +47,7 @@ mkdir $TCK_HOME/jpatckreport
 mkdir $TCK_HOME/jpatckwork
 
 cd $TCK_HOME/glassfish5/glassfish/bin
-./asadmin start-database --dbport 1527
+./asadmin start-database --dbhome $TCK_HOME/glassfish5/glassfish/databases --dbport 1527 --jvmoptions '-Djava.security.manager -Djava.security.policy=$TS_HOME/bin/security.policy'
 
 cd $TS_HOME/bin
 ant -f initdb.xml

diff --git a/install/jpa/bin/security.policy b/install/jpa/bin/security.policy
@@ -0,0 +1,12 @@
+/* Required for src/com/sun/ts/tests/jpa/core/StoredProcedureQuery */
+grant {
+    permission org.apache.derby.security.SystemPermission "engine", "usederbyinternals";
+    permission java.io.FilePermission       "<<ALL FILES>>", "read,write";
+    permission java.security.AllPermission;
+};
+
+grant codeBase "file:${TS_HOME}/lib/-" {
+     permission java.lang.RuntimePermission "createClassLoader";
+     permission java.io.FilePermission       "<<ALL FILES>>", "read,write";
+     permission java.security.AllPermission;
+};