Cannot grant_permission on a library

Question

Hello I am trying to access to a DDL C++ com object using a java code (JNI) in the database 10.1 on a windows 2003 server.
Following the step that I made :
- copy my DLL in the $ORACLE_HOM/lib
- I load my library : CREATE LIBRARY JNIUNIVOPT AS 'D:\oracle\product\10.2.0\db_1\LIB\JNIUNIVOPT.dll';
- load the class :
CREATE JAVA CLASS USING BFILE (Bfile_UNIVOPT,'JNIUNIVOPT.class');
CREATE JAVA CLASS USING BFILE (Bfile_UNIVOPT,'JNIUNIVOPTConstants.class');
CREATE JAVA CLASS USING BFILE (Bfile_UNIVOPT,'JNIUNIVOPTJNI.class');
CREATE JAVA CLASS USING BFILE (Bfile_UNIVOPT,'UOA_FPARRAY.class');
CREATE JAVA CLASS USING BFILE (Bfile_dir, 'UnivoptTests_JNI.class');
CREATE JAVA CLASS USING BFILE (Bfile_dir, 'Uoa');
- Publish my test class :
CREATE OR REPLACE PACKAGE uoa AS
FUNCTION price return NUMBER
AS
LANGUAGE java
NAME 'Uoa.price() return double';
end;
When I test I get the error :
ORA-29532: Java call terminated by uncaught Java exception: string
Cause: A Java exception or error was signaled and could not be resolved by the Java code.
In the Udump i get the following log :
java.lang.ExceptionInInitializerError at com.mbrm.universal_addins.UNIVOPT.JNIUNIVOPT.UOA_MULTITHREAD(JNIUNIVOPT.java:429) at Uoa.price(Uoa.java:78)
Caused by: java.security.AccessControlException: the Permission (java.lang.RuntimePermission loadLibrary.JNIUNIVOPT) has not been granted to MBRM. The PL/SQL to grant this is dbms_java.grant_permission( 'MBRM', 'SYS:java.lang.RuntimePermission', 'loadLibrary.JNIUNIVOPT', '' )
When I try to execute the procedure dbms_java.grant_permission, I get an other error :
ORA-29532: Java call terminated by uncaught Java exception: string
Cause: A Java exception or error was signaled and could not be resolved by the Java code.
At this point I am locked. My java test clas Uoa work at Windows level.
If any people can help-me I will apreciate
Thanks in advance

Answer 1

Hello I Discuss to the support and I get my answer :
CAUSE DETERMINATION
====================
The grant operation fails because it is restricted by JVM security policies. During Oracle
JVM installation, the java.lang.RuntimePermission is added to the java policy ta
ble, and afterwards, all users including SYS, are restricted from granting this
permission in future.
SOLUTION / ACTION PLAN
=======================
To implement the solution, please execute the following steps:
-- connect to database as SYS user
SQL> connect / as sysdba
-- identify the key ID of java policy that prevents any user (including SYS) to grant 'java.lang.RuntimePermission'
for LoadLibrary method
SQL> select seq from dba_java_policy
where type_name = 'oracle.aurora.rdbms.security.PolicyTablePermission'
and name = '0:java.lang.RuntimePermission#loadLibrary.*';
SEQ
54
-- disable this java policy
SQL> exec dbms_java.disable_permission(54);
-- grant java.lang.RuntimePermission for 'loadLibrary.JNIUNIVOPT' successfully
SQL> exec dbms_java.grant_permission( 'MBRM', 'SYS:java.lang.RuntimePermission', 'loadLibrary.JNIUNIVOPT', '' );
-- enable the restricting java policy again
SQL> exec dbms_java.enable_permission(54);