aboutsummaryrefslogtreecommitdiff
path: root/libjava/java/security/Policy.java
diff options
context:
space:
mode:
Diffstat (limited to 'libjava/java/security/Policy.java')
-rw-r--r--libjava/java/security/Policy.java150
1 files changed, 150 insertions, 0 deletions
diff --git a/libjava/java/security/Policy.java b/libjava/java/security/Policy.java
new file mode 100644
index 0000000..3a4a493
--- /dev/null
+++ b/libjava/java/security/Policy.java
@@ -0,0 +1,150 @@
+/* Policy.java --- Policy Manager Class
+ Copyright (C) 1999 Free Software Foundation, Inc.
+
+This file is part of GNU Classpath.
+
+GNU Classpath is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+GNU Classpath is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with GNU Classpath; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
+02111-1307 USA.
+
+As a special exception, if you link this library with other files to
+produce an executable, this library does not by itself cause the
+resulting executable to be covered by the GNU General Public License.
+This exception does not however invalidate any other reasons why the
+executable file might be covered by the GNU General Public License. */
+
+package java.security;
+
+/**
+ Policy is an abstract class for managing the system security
+ policy for the Java application environment. It specifies
+ which permissions are available for code from various
+ sources. The security policy is represented through a
+ subclass of Policy.
+
+ Only one Policy is in effect at any time. ProtectionDomain
+ initializes itself with information from this class on the
+ set of permssions to grant.
+
+ The location for the actual Policy could be anywhere in any
+ form because it depends on the Policy implementation. The
+ default system is in a flat ASCII file or it could be in a
+ database.
+
+ The current installed Policy can be accessed with getPolicy
+ and changed with setPolicy if the code has the correct
+ permissions.
+
+ The refresh method causes the Policy class to refresh/reload
+ its configuration. The method used to refresh depends on the
+ Policy implementation.
+
+ When a protection domain initializes its permissions it uses
+ code like:
+ <code>
+ policy = Policy.getPolicy();
+ permissionCollection perms = policy.getPermissions(MyCodeSource)
+ </code>
+ The protection domain passes the Policy handler a CodeSource
+ object which contains the codebase URL and public key. The
+ Policy implementation then returns the proper set of
+ permissions for the CodeSource.
+
+ The default Policy implementation can be changed by setting
+ the "policy.provider" security provider in java.security
+ to the correct Policy implementation class.
+
+ @author Mark Benvenuto
+
+ @since JDK 1.2
+ */
+public abstract class Policy
+{
+ // FIXME: The class name of the Policy provider should really be sourced
+ // from the "java.security" configuration file. For now, just hard-code
+ // a stub implementation.
+ static private Policy currentPolicy
+ = new gnu.java.security.provider.DefaultPolicy();
+
+ /**
+ Constructs a new Policy class.
+ */
+ public Policy()
+ {
+ }
+
+ /**
+ Gets the currently installed Policy handler. The value should
+ not be cached as it can be changed by setPolicy. This
+ function first calls <code>SecurityManager.checkPermission</code>
+ with <code>SecurityPermission("getPolicy")</code> to check
+ if the caller has Permission to get the current Policy.
+
+ @return the current Policy
+
+ @throws SecurityException if the security manager exists
+ the caller does not have permission to
+ <code>getPolicy</code>.
+ */
+ public static Policy getPolicy()
+ {
+ SecurityManager sm = System.getSecurityManager();
+ if (sm != null)
+ sm.checkPermission(new SecurityPermission("getPolicy"));
+
+ return currentPolicy;
+ }
+
+ /**
+ Sets the currently installed Policy handler. This
+ function first calls <code>SecurityManager.checkPermission</code>
+ with <code>SecurityPermission("setPolicy")</code> to check
+ if the caller has Permission to get the current Policy.
+
+ @param policy the new Policy to use
+
+ @throws SecurityException if the security manager exists
+ the caller does not have permission to
+ <code>getPolicy</code>.
+ */
+ public static void setPolicy(Policy policy)
+ {
+ SecurityManager sm = System.getSecurityManager();
+ if (sm != null)
+ sm.checkPermission(new SecurityPermission("setPolicy"));
+
+ currentPolicy = policy;
+ }
+
+
+ /**
+ Evalutes the global policy and returns a set of Permissions
+ allowed for the specified CodeSource.
+
+ @param codesource The CodeSource to get Permission for
+
+ @return a set of permissions for codesource specified by
+ the current policy
+
+ @throws SecurityException if the current thread does not
+ have permission to call <code>getPermissions</code>
+ */
+ public abstract PermissionCollection getPermissions(CodeSource codesource);
+
+ /**
+ Refreshes and/or reloads the current Policy. The actual
+ behavior of this method depends on the implementation.
+ */
+ public abstract void refresh();
+}