| java.lang.Object
 org.apache.axis2.java.security.AccessController
| AccessController | | public class AccessController (Code) | | This utility wrapper class is created to support AXIS2 runs
inside of Java 2 Security environment. Due to the access control
checking algorithm, for Java 2 Security to function properly,
doPrivileged()
is required in cases where there is application code on the stack frame
accessing the system resources (ie, read/write files, opening ports, and etc).
This class also improve performance no matther Security Manager is being enabled
or not.
Note: This utility should be used properly, otherwise might introduce
security holes.
Usage Example:
public void changePassword() {
...
AccessController.doPrivileged(new PrivilegedAction() {
public Object run() {
f = Util.openPasswordFile();
...
}
});
...
}
|
| Method Summary | |
| public static void | checkPermission(Permission perm)
Determines whether the access request indicated by the
specified permission should be allowed or denied, based on
the security policy currently in effect. | | public static Object | doPrivileged(PrivilegedAction action)
Performs the specified PrivilegedAction with privileges
enabled if a security manager is present.
If the action's run method throws an (unchecked) exception,
it will propagate through this method.
Parameters:
action - the action to be performed. | | public static Object | doPrivileged(PrivilegedAction action, AccessControlContext context)
Performs the specified PrivilegedAction with privileges
enabled and restricted by the specified AccessControlContext.
The action is performed with the intersection of the permissions
possessed by the caller's protection domain, and those possessed
by the domains represented by the specified
AccessControlContext if a security manager is present.
If the action's run method throws an (unchecked) exception,
it will propagate through this method.
Parameters:
action - the action to be performed.
Parameters:
context - an access control context representing therestriction to be applied to the caller's domain'sprivileges before performing the specified action. | | public static Object | doPrivileged(PrivilegedExceptionAction action)
Performs the specified PrivilegedExceptionAction with
privileges enabled. | | public static Object | doPrivileged(PrivilegedExceptionAction action, AccessControlContext context)
Performs the specified PrivilegedExceptionAction with
privileges enabled and restricted by the specified
AccessControlContext. | | public static AccessControlContext | getContext()
This method takes a "snapshot" of the current calling context, which
includes the current Thread's inherited AccessControlContext,
and places it in an AccessControlContext object. |
| checkPermission | | public static void checkPermission(Permission perm) throws AccessControlException(Code) | | Determines whether the access request indicated by the
specified permission should be allowed or denied, based on
the security policy currently in effect.
This method quietly returns if the access request
is permitted, or throws a suitable AccessControlException otherwise.
Parameters:
perm - the requested permission.
throws:
AccessControlException - if the specified permissionis not permitted, based on the current security policy. |
| doPrivileged | | public static Object doPrivileged(PrivilegedAction action, AccessControlContext context)(Code) | | Performs the specified PrivilegedAction with privileges
enabled and restricted by the specified AccessControlContext.
The action is performed with the intersection of the permissions
possessed by the caller's protection domain, and those possessed
by the domains represented by the specified
AccessControlContext if a security manager is present.
If the action's run method throws an (unchecked) exception,
it will propagate through this method.
Parameters:
action - the action to be performed.
Parameters:
context - an access control context representing therestriction to be applied to the caller's domain'sprivileges before performing the specified action. the value returned by the action's run method.
See Also: AccessController.doPrivileged(PrivilegedAction)
See Also: AccessController.doPrivileged(PrivilegedExceptionAction,AccessControlContext) |
| getContext | | public static AccessControlContext getContext()(Code) | | This method takes a "snapshot" of the current calling context, which
includes the current Thread's inherited AccessControlContext,
and places it in an AccessControlContext object. This context may then
be checked at a later point, possibly in another thread.
the AccessControlContext based on the current context.
See Also: AccessControlContext |
|
|