Granting permissions to DerbyThis section discusses which permissions should be granted to (the code base derby.jar).Permissionsgranting to Derby
See Default Policy Implementation and Policy File Syntax at http://java.sun.com/j2se/1.4.2/docs/guide/security/PolicyFiles.html for more information about creating policy files.
Allows to determine
the system directory when set by db2j.system.home and create it if
needed. If the system directory already exists then only the "read" permission
needs to be granted.
Only one of these permissions is needed. Permits the application to read,
write, and delete to the log
file, unless the log has been re-directed. (See the derby.stream.error properties
in for more
information.) If one of the requested valid actions is denied, the log
will be java.lang.System.err.
Combining permissions
You might grant one FilePermission that
encompasses several or all of the permissions instead of separately granting
a number of the more specific permissions. For example:permission java.io.FilePermission "${derby.system.home}/-", "read,write,delete"This allows the engine
complete access to the system directory and any databases contained in the
system directory.