| java.lang.Object java.security.Permission org.tanukisoftware.wrapper.security.WrapperEventPermission
WrapperEventPermission | public class WrapperEventPermission extends Permission (Code) | | WrapperEventPermissions are used to grant the right to register to start
receiving events from the Wrapper.
Some of these permissions can result in performance degredations if used
impropperly.
The following are examples of how to specify the permission within a policy
file.
grant codeBase "file:../lib/-" {
// Grant various permissions to a specific service.
permission org.tanukisoftware.wrapper.security.WrapperEventPermission "service";
permission org.tanukisoftware.wrapper.security.WrapperEventPermission "service, core";
permission org.tanukisoftware.wrapper.security.WrapperEventPermission "*";
};
Possible eventTypes include the following:
Permission Event Type Name |
What the Permission Allows |
Risks of Allowing this Permission |
service |
Register to obtain events whenever the Wrapper service receives any service events. |
Malicious code could receive this event and never return and thus cause performance
and timeout problems with the Wrapper. Normal use of these events are quite safe
however. |
control |
Register to obtain events whenever the Wrapper receives any system control signals. |
Malicious code could trap and consome control events, thus preventing an application
from being shut down cleanly. |
core |
Register to obtain events on the core workings of the Wrapper. |
Malicious code or even well meaning code can greatly affect the performance of
the Wrapper simply by handling these methods slowly. Some of these events are
fired from within the core timing code of the Wrapper. They are useful for
testing and performance checks, but in general they should not be used by
most applications.
|
author: Leif Mortenson |
Method Summary | |
public boolean | equals(Object obj) Checks two Permission objects for equality. | int | getActionMask() Returns the eventType mask of the Permission. | public String | getActions() Return the canonical string representation of the eventTypes.
Always returns present eventTypes in the following order:
start, stop, pause, continue, interrogate. | public int | hashCode() Returns the hash code value for this object. | public boolean | implies(Permission p2) Checks if this WrapperEventPermission object "implies" the
specified permission.
More specifically, this method returns true if:
- p2 is an instanceof FilePermission,
- p2's eventTypes are a proper subset of this object's eventTypes,
and
- p2's service name is implied by this object's service name.
For example, "MyApp*" implies "MyApp".
Parameters: p2 - the permission to check against. | boolean | impliesIgnoreEventTypeMask(WrapperEventPermission p2) Tests whether this permissions implies another without taking the
eventType mask into account. | public PermissionCollection | newPermissionCollection() Returns an custom WECollection implementation of a PermissionCollection. |
EVENT_TYPE_CONTROL | public static String EVENT_TYPE_CONTROL(Code) | | |
EVENT_TYPE_SERVICE | public static String EVENT_TYPE_SERVICE(Code) | | |
WrapperEventPermission | public WrapperEventPermission(String eventTypes)(Code) | | Creates a new WrapperEventPermission for the specified service.
Parameters: eventTypes - The event type or event types to be registered. |
equals | public boolean equals(Object obj)(Code) | | Checks two Permission objects for equality.
Do not use the equals method for making access control decisions; use
the implies method.
Parameters: obj - The object we are testing for equality with this object. True if both Permission objects are equivalent. |
getActionMask | int getActionMask()(Code) | | Returns the eventType mask of the Permission.
|
getActions | public String getActions()(Code) | | Return the canonical string representation of the eventTypes.
Always returns present eventTypes in the following order:
start, stop, pause, continue, interrogate. userCode.
the canonical string representation of the eventTypes. |
hashCode | public int hashCode()(Code) | | Returns the hash code value for this object.
A hash code value for this object. |
implies | public boolean implies(Permission p2)(Code) | | Checks if this WrapperEventPermission object "implies" the
specified permission.
More specifically, this method returns true if:
- p2 is an instanceof FilePermission,
- p2's eventTypes are a proper subset of this object's eventTypes,
and
- p2's service name is implied by this object's service name.
For example, "MyApp*" implies "MyApp".
Parameters: p2 - the permission to check against. true if the specified permission is implied by this object, |
impliesIgnoreEventTypeMask | boolean impliesIgnoreEventTypeMask(WrapperEventPermission p2)(Code) | | Tests whether this permissions implies another without taking the
eventType mask into account.
|
newPermissionCollection | public PermissionCollection newPermissionCollection()(Code) | | Returns an custom WECollection implementation of a PermissionCollection.
|
|
|