Rauf Sarwar wrote:
> Resant wrote:
> > I've add the permission by script :
> >
> > dbms_java.grant_permission( 'SCOTT', 'SYS:java.io.FilePermission',
> > '<<ALL FILES>>', 'execute' )
> >
> > and try to select again, but get error :
> > ERROR at line 1:
> > ORA-29532: Java call terminated by uncaught Java exception:
> > java.io.IOException: The handle is invalid.
> >
> > Something wrong with the Java procedure?
> >
> > Thanks
> >
> > Resant
>
> To add to Michael's corrections... you should make an effort to learn
> some basics about java, built in java security mechanism and the OS
> where your Oracle database is running. Without this, you will be
> shooting in the dark. Goto http://java.sun.com and download java docs.
>
> 1) When you deploy java code into Oracle, you have to consider the
> security mechanism of both Oracle and JVM. Unless your code is just a
> learning exercise, you are allowing user to run any OS command via the
> Runtime object. Do you really want to have this code in a Production
> system?
>
the following article should give him a good overview of security
mechanisms with Java in the Oracle database
http://www.oracle.com/technology/oramag/oracle/03-jul/o43devjvm.html
Received on Tue Jun 13 2006 - 11:43:02 CDT
