Work in progress with the security system.

Author: asfernandes

src/etc/bin/create-package.sh

@@ -15,6 +15,7 @@ mvn package dependency:copy-dependencies
 
 mkdir -p \
 	$TARGET_DIR/bin \
+	$TARGET_DIR/conf \
 	$TARGET_DIR/jar \
 	$TARGET_DIR/lib \
 	$TARGET_DIR/scripts
@@ -25,3 +26,11 @@ cp $BASE_DIR/src/fbjava/target/*.jar $TARGET_DIR/jar
 cp $BASE_DIR/src/fbjava/target/dependency/*.jar $TARGET_DIR/jar
 cp $BASE_DIR/output/$CONFIG/lib/libfbjava.so $TARGET_DIR/lib
 cp $BASE_DIR/src/fbjava/src/main/resources/org/firebirdsql/fbjava/*.sql $TARGET_DIR/scripts
+cp $BASE_DIR/src/etc/scripts/*.sql $TARGET_DIR/scripts
+
+if [ -f $TARGET_DIR/conf/java-security.fdb ]; then
+	rm $TARGET_DIR/conf/java-security.fdb
+fi
+
+echo "create database '$TARGET_DIR/conf/java-security.fdb' default character set utf8;" | isql -q
+isql $TARGET_DIR/conf/java-security.fdb -q -i $TARGET_DIR/scripts/java-security.sql

src/etc/scripts/java-security.sql

@@ -0,0 +1,43 @@
+create sequence seq_permission_group start with 2;
+
+create table permission_group (
+	id bigint not null constraint permission_group_pk primary key,
+	name varchar(255) not null
+);
+
+create table permission (
+	permission_group bigint not null constraint permission_pg_fk references permission_group,
+	user_name varchar(31) not null,
+	class_name varchar(255) not null,
+	arg1 varchar(255),
+	arg2 varchar(255)
+);
+
+create table database_permission_group (
+	database_pattern varchar(255) not null,
+	permission_group bigint not null constraint database_permission_group_pg_fk references permission_group
+);
+
+-- Common permission group
+insert into permission_group (id, name)
+	values (1, 'COMMON');
+
+-- Public permissions
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'file.separator', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'java.version', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'java.vendor', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'java.vendor.url', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'line.separator', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'os.*', 'read');
+insert into permission (permission_group, user_name, class_name, arg1, arg2)
+	values (1, 'PUBLIC', 'java.util.PropertyPermission', 'path.separator', 'read');
+
+-- Common permissions
+insert into database_permission_group (database_pattern, permission_group)
+	values ('%', 1);