com.sun.enterprise.security.provider

Class JDKPolicyFileWrapper

java.lang.Object

java.security.Policy

com.sun.enterprise.security.provider.JDKPolicyFileWrapper

Direct Known Subclasses:

PolicyWrapper

public class JDKPolicyFileWrapper
extends Policy

This class is a wrapper around the default jdk jdkPolicyFile file implementation. BasePolicyWrapper is installed as the JRE jdkPolicyFile object It multiples jdkPolicyFile decisions to the context specific instance of sun.security.provider.PolicyFile. Although this Policy provider is implemented using another Policy class, this class is not a "delegating Policy provider" as defined by JACC, and as such it SHOULD not be configured using the JACC system property javax.security.jacc.policy.provider.

Author:

Harpreet Singh ([email protected]), Jean-Francois Arcand, Ron Monzillo

Nested Class Summary

Nested classes/interfaces inherited from class java.security.Policy

Policy.Parameters

Field Summary

Fields inherited from class java.security.Policy

UNSUPPORTED_EMPTY_COLLECTION

Constructor Summary

Constructors

Constructor and Description
JDKPolicyFileWrapper()

Method Summary

Modifier and Type	Method and Description
protected Policy	getNewPolicy() Gets the underlying PolicyFile implementation can be overridden by Subclass
PermissionCollection	getPermissions(CodeSource codesource) Evaluates the global jdkPolicyFile and returns a PermissionCollection object specifying the set of permissions allowed for code from the specified code source.
PermissionCollection	getPermissions(ProtectionDomain domain) Evaluates the global jdkPolicyFile and returns a PermissionCollection object specifying the set of permissions allowed given the characteristics of the protection domain.
boolean	implies(ProtectionDomain domain, Permission permission) Evaluates the global jdkPolicyFile for the permissions granted to the ProtectionDomain and tests whether the permission is granted.
void	refresh() Refreshes/reloads the jdkPolicyFile configuration.

Methods inherited from class java.security.Policy

getInstance, getInstance, getInstance, getParameters, getPolicy, getProvider, getType, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JDKPolicyFileWrapper

public JDKPolicyFileWrapper()

Method Detail

getNewPolicy

protected Policy getNewPolicy()

Gets the underlying PolicyFile implementation can be overridden by Subclass

getPermissions

public PermissionCollection getPermissions(CodeSource codesource)

Evaluates the global jdkPolicyFile and returns a PermissionCollection object specifying the set of permissions allowed for code from the specified code source.

Overrides:

getPermissions in class Policy

Parameters:

codesource - the CodeSource associated with the caller. This encapsulates the original location of the code (where the code came from) and the public key(s) of its signer.

Returns:

the set of permissions allowed for code from codesource according to the jdkPolicyFile.The returned set of permissions must be a new mutable instance and it must support heterogeneous Permission types.

getPermissions

public PermissionCollection getPermissions(ProtectionDomain domain)

Evaluates the global jdkPolicyFile and returns a PermissionCollection object specifying the set of permissions allowed given the characteristics of the protection domain.

Overrides:

getPermissions in class Policy

Parameters:

domain - the ProtectionDomain associated with the caller.

Returns:

the set of permissions allowed for the domain according to the jdkPolicyFile.The returned set of permissions must be a new mutable instance and it must support heterogeneous Permission types.

Since:

1.4

See Also:

ProtectionDomain, SecureClassLoader

implies

public boolean implies(ProtectionDomain domain,
                       Permission permission)

Evaluates the global jdkPolicyFile for the permissions granted to the ProtectionDomain and tests whether the permission is granted.

Overrides:

implies in class Policy

Parameters:

domain - the ProtectionDomain to test

permission - the Permission object to be tested for implication.

Returns:

true if "permission" is a proper subset of a permission granted to this ProtectionDomain.

Since:

1.4

See Also:

ProtectionDomain

refresh

public void refresh()

Refreshes/reloads the jdkPolicyFile configuration. The behavior of this method depends on the implementation. For example, calling refresh on a file-based jdkPolicyFile will cause the file to be re-read.

Overrides:

refresh in class Policy