From: books at ejurka.com (Kris Jurka)
Date: Wed, 5 Mar 2008 14:06:55 -0500 (EST)
Subject: [Pljava-dev] One more question today: Permision failure in
 Backend.java
In-Reply-To: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>
References: <56DA5079467D1C48B857C6FE59D5D4FCF9A0FA@prodeaserve.prodea.local>
Message-ID: <Pine.BSO.4.64.0803051359310.30149@leary.csoft.net>



On Wed, 5 Mar 2008, Mike Toler wrote:

> I'm attempting to open and read a file from within my java application
> triggered by postgres.
>
> I'm doing a simple "FileInputStream" command to open the file:
>        wsdl = new FileInputStream(wsdlFile);
>

Embedded postgresql server languages come in two versions, trusted and 
untrusted.  The "java" language is trusted meaning that it won't let 
normal users escape security permissions setup for them.  For example if 
they could open any file, they could open the database files directly and 
read data they shouldn't have access to.  You probably want the "javaU" 
language which is untrusted.

http://wiki.tada.se/display/pljava/Security
http://www.postgresql.org/docs/8.3/static/plperl-trusted.html

Kris Jurka