com.sun.enterprise.security.perms

Class SMGlobalPolicyUtil

java.lang.Object

com.sun.enterprise.security.perms.SMGlobalPolicyUtil

public class SMGlobalPolicyUtil
extends Object

Utility class to load the EE permissions, EE restrictions, and check restrictions for a given permission set

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SMGlobalPolicyUtil.CommponentType Java EE Component type supporting the use of declared permissions

Field Summary

Fields

Modifier and Type	Field and Description
static String	CLIENT_TYPE_CODESOURCE Code source URL representing App client type
protected static String	domainCfgFolder
static String	EAR_CLASS_LOADER
static String	EAR_TYPE_CODESOURCE Code source URL representing Ear type
static String	EE_GRANT_FILE This is the file storing the default permissions granted to each component type
static String	EE_RESTRICTED_FILE This is the file storing the restricted permissions for each component type; Any permissions declared in this list can not be used by the application
static String	EJB_TYPE_CODESOURCE Code source URL representing Ejb type
static String	RAR_TYPE_CODESOURCE Code source URL representing Rar type
static String	SERVER_ALLOWED_FILE This is the file storing the allowed permissions for each component type A permission listed in this file may not be used but the application, but any application declared permission must exist in this list;
protected static String	SYS_PROP_JAVA_SEC_POLICY
static String	WEB_TYPE_CODESOURCE Code source URL representing Web type

Constructor Summary

Constructors

Constructor and Description
SMGlobalPolicyUtil()

Method Summary

Modifier and Type	Method and Description
static void	checkRestriction(PermissionCollection declaredPC, PermissionCollection restrictedPC) Checks a permissions set against a restriction set
static void	checkRestriction(SMGlobalPolicyUtil.CommponentType type, PermissionCollection declaredPC)
static void	checkRestrictionOfComponentType(PermissionCollection declaredPC, SMGlobalPolicyUtil.CommponentType type) Check a permission set against a restriction of a component type
static void	checkRestrictionOfEar(PermissionCollection declaredPC)
static SMGlobalPolicyUtil.CommponentType	convertComponentType(String type)
static PermissionCollection	getCompRestrictedPerms(SMGlobalPolicyUtil.CommponentType type) Get the restricted permission set of a specified component type on the server
static PermissionCollection	getCompRestrictedPerms(String type)
static PermissionCollection	getEECompGrantededPerms(SMGlobalPolicyUtil.CommponentType type) Get the default granted permissions of a specified component type
static PermissionCollection	getEECompGrantededPerms(String type) Get the default granted permissions of a specified component type

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

EE_GRANT_FILE

public static final String EE_GRANT_FILE

This is the file storing the default permissions granted to each component type

See Also:

Constant Field Values

EE_RESTRICTED_FILE

public static final String EE_RESTRICTED_FILE

This is the file storing the restricted permissions for each component type; Any permissions declared in this list can not be used by the application

See Also:

Constant Field Values

SERVER_ALLOWED_FILE

public static final String SERVER_ALLOWED_FILE

This is the file storing the allowed permissions for each component type A permission listed in this file may not be used but the application, but any application declared permission must exist in this list;

See Also:

Constant Field Values

SYS_PROP_JAVA_SEC_POLICY

protected static final String SYS_PROP_JAVA_SEC_POLICY

See Also:

Constant Field Values

EJB_TYPE_CODESOURCE

public static final String EJB_TYPE_CODESOURCE

Code source URL representing Ejb type

See Also:

Constant Field Values

WEB_TYPE_CODESOURCE

public static final String WEB_TYPE_CODESOURCE

Code source URL representing Web type

See Also:

Constant Field Values

RAR_TYPE_CODESOURCE

public static final String RAR_TYPE_CODESOURCE

Code source URL representing Rar type

See Also:

Constant Field Values

CLIENT_TYPE_CODESOURCE

public static final String CLIENT_TYPE_CODESOURCE

Code source URL representing App client type

See Also:

Constant Field Values

EAR_TYPE_CODESOURCE

public static final String EAR_TYPE_CODESOURCE

Code source URL representing Ear type

See Also:

Constant Field Values

EAR_CLASS_LOADER

public static final String EAR_CLASS_LOADER

See Also:

Constant Field Values

domainCfgFolder

protected static final String domainCfgFolder

Constructor Detail

SMGlobalPolicyUtil

public SMGlobalPolicyUtil()

Method Detail

convertComponentType

public static SMGlobalPolicyUtil.CommponentType convertComponentType(String type)

getEECompGrantededPerms

public static PermissionCollection getEECompGrantededPerms(SMGlobalPolicyUtil.CommponentType type)

Get the default granted permissions of a specified component type

Parameters:

type - Java EE component type

Returns:

the permission set granted to the specified component

getEECompGrantededPerms

public static PermissionCollection getEECompGrantededPerms(String type)

Get the default granted permissions of a specified component type

Parameters:

type - Java EE component type such as ejb, war, rar, car, ear

Returns:

getCompRestrictedPerms

public static PermissionCollection getCompRestrictedPerms(SMGlobalPolicyUtil.CommponentType type)

Get the restricted permission set of a specified component type on the server

Parameters:

type - Java EE component type

Returns:

the restricted permission set of the specified component type on the server

getCompRestrictedPerms

public static PermissionCollection getCompRestrictedPerms(String type)

checkRestriction

public static void checkRestriction(SMGlobalPolicyUtil.CommponentType type,
                                    PermissionCollection declaredPC)
                             throws SecurityException

Throws:

SecurityException

checkRestriction

public static void checkRestriction(PermissionCollection declaredPC,
                                    PermissionCollection restrictedPC)
                             throws SecurityException

Checks a permissions set against a restriction set

Parameters:

declaredPC -

restrictedPC -

Throws:

SecurityException - is thrown if violation detected

checkRestrictionOfComponentType

public static void checkRestrictionOfComponentType(PermissionCollection declaredPC,
                                                   SMGlobalPolicyUtil.CommponentType type)
                                            throws SecurityException

Check a permission set against a restriction of a component type

Parameters:

declaredPC -

type -

Throws:

SecurityException

checkRestrictionOfEar

public static void checkRestrictionOfEar(PermissionCollection declaredPC)
                                  throws SecurityException

Throws:

SecurityException