OperationMonitor.setOperationAware, Connection.abort and Connection.setNetworkTimeout fail with a SecurityException on Java 24+

[mrotteveel]

Tests initializing OperationMonitor, or otherwise involving the security manager fail with "java.lang.SecurityException: checking permissions is not supported".

These tests are:

• FbDatabaseOperationTest. closeOfExecuteNotifiesExecuteEnd()
• FbDatabaseOperationTest. closeOfFetchNotifiesFetchEnd()
• FbDatabaseOperationTest. closedExecuteDisallowsCancellation()
• FbDatabaseOperationTest. closedFetchDisallowsCancellation()
• FbDatabaseOperationTest. executionError
• FbDatabaseOperationTest. signalExecuteNotifiesExecuteStart()
• FbDatabaseOperationTest. signalFetchNotifiesFetchStart()
• FbDatabaseOperationTest. unclosedExecuteAllowsCancellation()
• FbDatabaseOperationTest. unclosedFetchAllowsCancellation()
• OperationMonitorTest. endOperationNotifiesOnRegisteredInstance()
• OperationMonitorTest. executionError
• OperationMonitorTest. notificationDuringSimpleSelect()
• OperationMonitorTest. startOperationNotifiesOnRegisteredInstance()
• OperationMonitorTest. synchronousCancellationDuringExecute()
• OperationMonitorTest. synchronousCancellationDuringFetch()
• V11StatementTest. testAsyncFetchRows_allowCancel()
• V12StatementTest. testAsyncFetchRows_allowCancel()
• V13StatementTest. testAsyncFetchRows_allowCancel()
• V15StatementTest. testAsyncFetchRows_allowCancel()
• V16StatementTest. testAsyncFetchRows_allowCancel()
• FBConnectionTest. abortClosesConnectionImmediately()
• FBConnectionTest. abortClosesStatementsAndResultSets()
• FBConnectionTest. setNetworkTimeout_getAndSetSeries(ExecutorService)
• FBConnectionTest. setNetworkTimeout_invalidExecutor()
• FBConnectionTest. setNetworkTimeout_invalidTimeout(ExecutorService)
• FBConnectionTest. setNetworkTimeout_isUsed(ExecutorService)

This is something that needs to be fixed in the main code, or possibly in the tests.

[mrotteveel]

Jaybird 5 is not affected, as that uses:

SecurityManager securityManager = System.getSecurityManager();
if (securityManager != null) {
    SQLPermission permission = new SQLPermission(PERMISSION_INIT_OPERATION_AWARE);
    securityManager.checkPermission(permission);
}

while for Jaybird 6 we switched to Permission#checkGuard:

PERMISSION_INIT_OPERATION_AWARE.checkGuard(OperationMonitor.class);

In Java 24, this will always throw a SecurityException. In other words, we need to revert to the original check using SecurityManager directly (as System.getSecurityManager() always returns null on Java 24).

[mrotteveel]

Affected methods are:

• OperationMonitor.setOperationAware
• Connection.abort
• Connection.setNetworkTimeout

Reason is that java.security.Permission.checkGuard in Java 24 was modified to always throw SecurityException, instead of turning it into a no-op (or even leave its original implementation), which would have been the backwards compatible change.