org.apache.jetspeed.security.impl
Class RdbmsPolicy

java.lang.Object
  java.security.Policy
      org.apache.jetspeed.security.impl.RdbmsPolicy

public class RdbmsPolicy
extends java.security.Policy

Policy implementation using a relational database as persistent datastore.

This code was partially inspired from articles from:

• Extend JAAS for class instance-level authorization.
• When "java.policy" Just Isn't Good Enough.

Author:

David Le Strat

Constructor Summary

RdbmsPolicy(PermissionManager pms)
Default constructor.

Method Summary

java.security.PermissionCollection	getPermissions(java.security.CodeSource codeSource) The RdbmsPolicy does not protect code source per say, but will return the protected code source from the other configured policies.
java.security.PermissionCollection	getPermissions(java.security.ProtectionDomain domain)
boolean	implies(java.security.ProtectionDomain protectionDomain, java.security.Permission permission) Check that the permission is implied for the protection domain.
void	refresh()

Methods inherited from class java.security.Policy

getPolicy, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RdbmsPolicy

public RdbmsPolicy(PermissionManager pms)

Default constructor.

Method Detail

refresh

public void refresh()

Specified by:

refresh in class java.security.Policy

See Also:

Policy.refresh()

implies

public boolean implies(java.security.ProtectionDomain protectionDomain,
                       java.security.Permission permission)

Check that the permission is implied for the protection domain. This will check for permissions against the configured RDBMS and all SecurityPolicies configured through the AuthorizationProvider.

The default policy is by default part of the SecurityPolicies and will only if configured through assembly.

Overrides:

implies in class java.security.Policy

See Also:

Policy.implies(java.security.ProtectionDomain, java.security.Permission)

getPermissions

public java.security.PermissionCollection getPermissions(java.security.ProtectionDomain domain)

Overrides:

getPermissions in class java.security.Policy

See Also:

Policy.getPermissions(java.security.ProtectionDomain)

getPermissions

public java.security.PermissionCollection getPermissions(java.security.CodeSource codeSource)

The RdbmsPolicy does not protect code source per say, but will return the protected code source from the other configured policies.

Specified by:

getPermissions in class java.security.Policy

See Also:

Policy.getPermissions(java.security.CodeSource)