Package com.illumon.iris.security

Class DenyingPolicy

java.lang.Object

java.security.Policy

com.illumon.iris.security.DatabaseQueryingPolicy

com.illumon.iris.security.DenyingPolicy

public final class DenyingPolicy
extends DatabaseQueryingPolicy

Wrapper that adds rudimentary DeniedPermission processing capabilities to the standard file-backed Policy. Also allows database queries.

Nested Class Summary

Nested classes/interfaces inherited from class java.security.Policy

Policy.Parameters

Field Summary

Fields inherited from class com.illumon.iris.security.DatabaseQueryingPolicy

database, log

Fields inherited from class java.security.Policy

UNSUPPORTED_EMPTY_COLLECTION

Constructor Summary

Constructors

Constructor	Description
DenyingPolicy()	Create a policy with a null logger and no database connection
DenyingPolicy(com.fishlib.io.logger.Logger log, Database database)	Create a policy with the specified logger and database connection.

Method Summary

Modifier and Type	Method	Description
PermissionCollection	getPermissions(CodeSource codesource)
PermissionCollection	getPermissions(ProtectionDomain domain)
boolean	implies(ProtectionDomain domain, Permission permission)
void	refresh()

Methods inherited from class java.security.Policy

getInstance, getInstance, getInstance, getParameters, getPolicy, getProvider, getType, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DenyingPolicy

@Permissions public DenyingPolicy()

Create a policy with a null logger and no database connection

DenyingPolicy

public DenyingPolicy(com.fishlib.io.logger.Logger log, Database database)

Create a policy with the specified logger and database connection.

Parameters:

log - The Logger to use

database - The Database that permissions can check if needed

Method Details

getPermissions

public PermissionCollection getPermissions(CodeSource codesource)

Overrides:

getPermissions in class Policy

getPermissions

public PermissionCollection getPermissions(ProtectionDomain domain)

Overrides:

getPermissions in class Policy

implies

public boolean implies(ProtectionDomain domain, Permission permission)

Overrides:

implies in class Policy

Returns:

true iff:

• permission is not an instance of DeniedPermission,
• an implies(domain, permission) invocation on the system-default Policy yields true, and
• permission is not implied by any DeniedPermissions having potentially been assigned to domain.

refresh

public void refresh()

Overrides:

refresh in class Policy