com.liferay.portal.security.pacl

Class PortalSecurityManagerImpl

java.lang.Object

java.lang.SecurityManager

com.liferay.portal.security.pacl.PortalSecurityManagerImpl

All Implemented Interfaces:

com.liferay.portal.security.lang.PortalSecurityManager

public class PortalSecurityManagerImpl
extends java.lang.SecurityManager
implements com.liferay.portal.security.lang.PortalSecurityManager

This is the portal's implementation of a security manager. The goal is to protect portal resources from plugins and prevent security issues by forcing plugin developers to openly declare their requirements. Where a SecurityManager exists, we set that as the parent and delegate to it as a fallback. This class will not delegate checks to super when there is no parent so as to avoid forcing the need for a default policy.

Author:

Brian Wing Shun Chan, Raymond Augé, Zsolt Berentey

Field Summary

Fields inherited from class java.lang.SecurityManager

inCheck

Constructor Summary

Constructors

Constructor and Description
PortalSecurityManagerImpl()

Method Summary

Methods

Modifier and Type	Method and Description
protected void	addWebLogicHook()
protected void	addWebSphereHook()
void	checkMemberAccess(java.lang.Class<?> clazz, int accessibility)
void	checkPermission(java.security.Permission permission)
void	destroy()
java.security.Policy	getPolicy()
protected void	initClass(java.lang.Class<?> clazz)
protected void	initClasses()
protected void	initInitialContextFactoryBuilder()
protected void	initPACLImpl(java.lang.Class<?> clazz, java.lang.Object pacl)
protected void	initPACLImpls()

Methods inherited from class java.lang.SecurityManager

checkAccept, checkAccess, checkAccess, checkAwtEventQueueAccess, checkConnect, checkConnect, checkCreateClassLoader, checkDelete, checkExec, checkExit, checkLink, checkListen, checkMulticast, checkMulticast, checkPackageAccess, checkPackageDefinition, checkPermission, checkPrintJobAccess, checkPropertiesAccess, checkPropertyAccess, checkRead, checkRead, checkRead, checkSecurityAccess, checkSetFactory, checkSystemClipboardAccess, checkTopLevelWindow, checkWrite, checkWrite, classDepth, classLoaderDepth, currentClassLoader, currentLoadedClass, getClassContext, getInCheck, getSecurityContext, getThreadGroup, inClass, inClassLoader

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PortalSecurityManagerImpl

public PortalSecurityManagerImpl()

Method Detail

checkMemberAccess

public void checkMemberAccess(java.lang.Class<?> clazz,
                     int accessibility)

Overrides:

checkMemberAccess in class java.lang.SecurityManager

checkPermission

public void checkPermission(java.security.Permission permission)

Overrides:

checkPermission in class java.lang.SecurityManager

destroy

public void destroy()

Specified by:

destroy in interface com.liferay.portal.security.lang.PortalSecurityManager

getPolicy

public java.security.Policy getPolicy()

Specified by:

getPolicy in interface com.liferay.portal.security.lang.PortalSecurityManager

addWebLogicHook

protected void addWebLogicHook()

addWebSphereHook

protected void addWebSphereHook()

initClass

protected void initClass(java.lang.Class<?> clazz)

initClasses

protected void initClasses()

initInitialContextFactoryBuilder

protected void initInitialContextFactoryBuilder()
                                         throws java.lang.Exception

Throws:

java.lang.Exception

initPACLImpl

protected void initPACLImpl(java.lang.Class<?> clazz,
                java.lang.Object pacl)
                     throws java.lang.Exception

Throws:

java.lang.Exception

initPACLImpls

protected void initPACLImpls()
                      throws java.lang.Exception

Throws:

java.lang.Exception