This section describes the permissions that should be granted to the codebase derby.jar to allow you to run embedded Derby with a security manager.
These permissions are also needed to run the Network Server, but the Network Server requires additional permissions as well.
These permissions are listed approximately in the order shown in Sample customized Java security policy file. Some of the optional permissions are not included in Sample customized Java security policy file.
permission java.io.FilePermission "${derby.system.home}/-", "read,write,delete";
This permission allows the
Derby engine complete access
to the system directory and any databases contained in the system directory.
You will probably want to restrict these liberal permissions, which allow the
server to backup/restore and export/import to or from any location in the local
file system.