org.apache.derbyTesting.functionTests.tests.lang

Class RoutineSecurityTest

java.lang.Object

junit.framework.Assert

junit.framework.TestCase

org.apache.derbyTesting.junit.BaseTestCase

org.apache.derbyTesting.junit.BaseJDBCTestCase

org.apache.derbyTesting.functionTests.tests.lang.RoutineSecurityTest

All Implemented Interfaces:

junit.framework.Test

public class RoutineSecurityTest
extends BaseJDBCTestCase

Set of tests that ensure SQL routines implemented in Java are correctly restricted in their actions when a security manager is in place. Assumption is that the standard running of this test will setup a security manager.

Field Summary

Fields inherited from class org.apache.derbyTesting.junit.BaseTestCase

DEFAULT_DB_DIR, DERBY_LOG, ERRORSTACKTRACEFILE

Constructor Summary

Constructors

Constructor and Description
RoutineSecurityTest(java.lang.String name)

Method Summary

Modifier and Type	Method and Description
private void	assertSecurityException(java.sql.SQLException e) Test for a security exception within a routine.
static junit.framework.Test	suite() Test only runs in embedded as it is testing server side SQL routines implemented in Java.
void	testGetSystemProperty() Test obtaining a system property using the Java library method System.getProperty() directly.
void	testInternalClass() Check that a user routine cannot resolve to a internal derby class, currently limited to not resolving to any class in the org.apache.derby namespace.
void	testSystemExit() Check that System.exit() cannot be called directly from a procedure.
void	testSystemGC() Check that System.gc() can be called directly from a procedure.

Methods inherited from class org.apache.derbyTesting.junit.BaseJDBCTestCase

assertCallError, assertCheckTable, assertCompileError, assertEquals, assertEquals, assertEquals, assertEquivalentDataType, assertErrorCode, assertGetIntError, assertNextError, assertPreparedStatementError, assertSQLExceptionEquals, assertSQLState, assertSQLState, assertStatementError, assertStatementError, assertStatementError, assertStatementError, assertStatementErrorUnordered, assertTableRowCount, assertUpdateCount, assertUpdateCount, assertWarning, checkAllConsistency, checkEstimatedRowCount, closeStatement, commit, createStatement, createStatement, createStatement, dropTable, dropTable, dropView, dropView, emptyStatementCache, getClientTransactionID, getConnection, getDatabaseProperty, getLastSQLException, initializeConnection, openConnection, openDefaultConnection, openDefaultConnection, openDefaultConnection, openUserConnection, prepareCall, prepareCall, prepareCall, prepareStatement, prepareStatement, prepareStatement, prepareStatement, prepareStatement, prepareStatement, rollback, runBare, runBareOverridable, runScript, runScript, runSQLCommands, setAutoCommit, tearDown, usingDB2Client, usingDerbyNetClient, usingEmbedded

Methods inherited from class org.apache.derbyTesting.junit.BaseTestCase

alarm, assertDirectoryDeleted, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertExecJavaCmdAsExpected, assertLaunchedJUnitTestMethod, assertLaunchedJUnitTestMethod, assertSecurityManager, assertThrowableEquals, currentDirectory, execJavaCmd, execJavaCmd, fail, getClassVersionMajor, getEmmaJar, getFailureFolder, getFilesWith, getJavaExecutableName, getSystemProperty, getTestConfiguration, getTestResource, hasInterruptibleIO, isCVM, isIBMJVM, isJ9Platform, isJava5, isJava7, isJava8, isPhoneME, isPlatform, isSunJVM, isWindowsPlatform, openTestResource, println, printStackTrace, readProcessOutput, removeDirectory, removeDirectory, removeFiles, removeSystemProperty, runsWithEmma, runsWithJaCoCo, setSystemProperty, sleep, sleepAtLeastOneTick, traceit

Methods inherited from class junit.framework.TestCase

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, countTestCases, createResult, fail, fail, failNotEquals, failNotSame, failSame, format, getName, run, run, runTest, setName, setUp, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

RoutineSecurityTest

public RoutineSecurityTest(java.lang.String name)

Method Detail

suite

public static junit.framework.Test suite()

Test only runs in embedded as it is testing server side SQL routines implemented in Java.

testGetSystemProperty

public void testGetSystemProperty()
                           throws java.sql.SQLException

Test obtaining a system property using the Java library method System.getProperty() directly. Note that since the system method is called directly there is no privilege block and so to read a property the permission must have been granted all the way up the stack *including* the generated class. This can only occur for a generic grant entry in the policy file (with no code URL).

Throws:

java.sql.SQLException

testSystemExit

public void testSystemExit()
                    throws java.sql.SQLException

Check that System.exit() cannot be called directly from a procedure.

Throws:

java.sql.SQLException

testSystemGC

public void testSystemGC()
                  throws java.sql.SQLException

Check that System.gc() can be called directly from a procedure.

Throws:

java.sql.SQLException

testInternalClass

public void testInternalClass()
                       throws java.sql.SQLException

Check that a user routine cannot resolve to a internal derby class, currently limited to not resolving to any class in the org.apache.derby namespace.

Throws:

java.sql.SQLException

assertSecurityException

private void assertSecurityException(java.sql.SQLException e)

Test for a security exception within a routine. Current test is that the SQLException returned to the client has SQLState 38000 and wraps a SQLException with SQLState XJ001 which corresponds to wrapped Java exception.

Parameters:

e -