io.takari.builder.enforcer

Class ComposableSecurityManagerPolicy

java.lang.Object

java.security.Policy

io.takari.builder.enforcer.ComposableSecurityManagerPolicy

public class ComposableSecurityManagerPolicy
extends Policy

Nested Class Summary

Nested classes/interfaces inherited from class java.security.Policy

Policy.Parameters

Field Summary

Fields

Modifier and Type	Field and Description
static PermissionCollection	allPermissions

Fields inherited from class java.security.Policy

UNSUPPORTED_EMPTY_COLLECTION

Constructor Summary

Constructors

Constructor and Description
ComposableSecurityManagerPolicy(SecurityManager originalManager, Policy originalPolicy)

Method Summary

Modifier and Type	Method and Description
protected void	checkRead(Collection<io.takari.builder.enforcer.CachingPolicy> policies, String fileName)
protected void	checkWrite(Collection<io.takari.builder.enforcer.CachingPolicy> policies, String fileName)
static Policy	getContextPolicy(Object key)
PermissionCollection	getPermissions(CodeSource domain)
PermissionCollection	getPermissions(ProtectionDomain domain)
boolean	implies(ProtectionDomain protectionDomain, Permission permission) The key to using a Policy rather than a modified security manager is that a Policy will not be called when the jvm code (which does not have a protection domain associated with it) executes command to get system properties of spawns threads for itself.
static void	registerContextPolicy(Object key, Policy policy)
static ComposableSecurityManagerPolicy	removeSystemSecurityManager()
static void	setDefaultPolicy(Policy policy)
static ComposableSecurityManagerPolicy	setSystemSecurityManager()
static Policy	unregisterContextPolicy(Object key)

Methods inherited from class java.security.Policy

getInstance, getInstance, getInstance, getParameters, getPolicy, getProvider, getType, refresh, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

allPermissions

public static final PermissionCollection allPermissions

Constructor Detail

ComposableSecurityManagerPolicy

public ComposableSecurityManagerPolicy(SecurityManager originalManager,
                                       Policy originalPolicy)

Method Detail

implies

public boolean implies(ProtectionDomain protectionDomain,
                       Permission permission)

The key to using a Policy rather than a modified security manager is that a Policy will not be called when the jvm code (which does not have a protection domain associated with it) executes command to get system properties of spawns threads for itself. We can further benefit from the optimizations this gives us by returning a permission collection allPermissions when getPermissions(ProtectionDomain) is called with a protection domain we don't want to interfere with.

Overrides:

implies in class Policy

checkWrite

protected void checkWrite(Collection<io.takari.builder.enforcer.CachingPolicy> policies,
                          String fileName)

checkRead

protected void checkRead(Collection<io.takari.builder.enforcer.CachingPolicy> policies,
                         String fileName)

getPermissions

public PermissionCollection getPermissions(ProtectionDomain domain)

Overrides:

getPermissions in class Policy

getPermissions

public PermissionCollection getPermissions(CodeSource domain)

Overrides:

getPermissions in class Policy

setDefaultPolicy

public static void setDefaultPolicy(Policy policy)

registerContextPolicy

public static void registerContextPolicy(Object key,
                                         Policy policy)

unregisterContextPolicy

public static Policy unregisterContextPolicy(Object key)

getContextPolicy

public static Policy getContextPolicy(Object key)

setSystemSecurityManager

public static ComposableSecurityManagerPolicy setSystemSecurityManager()

removeSystemSecurityManager

public static ComposableSecurityManagerPolicy removeSystemSecurityManager()