org.apache.river.api.security

Interface AdvisoryDynamicPermissions

@Beta
public interface AdvisoryDynamicPermissions

Jar files that include a META-INF/PERMISSIONS.LIST file, allow a ProxyPreparer to grant these permissions dynamically.

The PERMISSIONS.LIST file must be UTF-8 encoded, the format of the file is line based, length is not limited, however lines must be readable by BufferedReader.readLine().

Syntax:

Comments begin with # or //.

A permission is represented by three whitespace delimited strings:

• type - The fully qualified class name of the permission. The class must be a subclass of java.security.Permission and must define a 2-argument constructor that takes a name string and an actions string.
• name - The permission name that will be passed as the first argument to the constructor of the Permission class identified by type.
• actions - The permission actions that will be passed as the second argument to the constructor of the Permission class identified by type.

The encoded format is:

 (type)
 

or

 (type "name")
 

or

 (type "name" "actions")
 

where name and actions are strings that must be encoded for proper parsing. Specifically, the ",\, carriage return, and line feed characters must be escaped using \", \\,\r, and \n, respectively.

The encoded string contains no leading or trailing whitespace characters. A single space character is used between type and "name" and between "name" and "actions".

Since:

3.0.0

Author:

peter

Field Summary

Fields

Modifier and Type	Field and Description
static Permission[]	DEFAULT_PERMISSIONS

Method Summary

Modifier and Type	Method and Description
Permission[]	getPermissions() Advisory permissions for smart proxy's, the client may or may not grant them.

Field Detail

DEFAULT_PERMISSIONS

static final Permission[] DEFAULT_PERMISSIONS

Method Detail

getPermissions

Permission[] getPermissions()

Advisory permissions for smart proxy's, the client may or may not grant them. This method is typically called from a ProxyPreparer implementation. If the client chooses to grant these permissions, it may do so to a specific proxy with Principals belonging to a specific ClassLoader after authenticating the proxy's principal.

Returns:

unshared array containing only advisory permissions and no null references.