org.apache.webbeans.corespi.security

Class ManagedSecurityService

java.lang.Object

org.apache.webbeans.corespi.security.ManagedSecurityService

All Implemented Interfaces:

SecurityService

public class ManagedSecurityService
extends Object
implements SecurityService

This version of the SecurityService uses the java.lang.SecurityManager to check low level access to the underlying functions via doPriviliged blocks. The most secure way is to just copy the source over to your own class and configure it in openwebbeans.properties. This way you can add whatever security features you like to use.

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	ManagedSecurityService.PrivilegedActionForClass
protected static class	ManagedSecurityService.PrivilegedActionForIsAccessible
protected static class	ManagedSecurityService.PrivilegedActionForObjectCreation
protected static class	ManagedSecurityService.PrivilegedActionForProperty
protected static class	ManagedSecurityService.PrivilegedActionForSetAccessible
protected static class	ManagedSecurityService.PrivilegedActionForSetProperty
protected static class	ManagedSecurityService.PrivilegedActionGetSystemProperties

Constructor Summary

Constructors

Constructor and Description
ManagedSecurityService()

Method Summary

Modifier and Type	Method and Description
<T> Constructor<T>	doPrivilegedGetConstructor(Class<T> clazz, Class<?>... parameterTypes)
<T> Constructor<T>	doPrivilegedGetDeclaredConstructor(Class<T> clazz, Class<?>... parameterTypes)
<T> Constructor<?>[]	doPrivilegedGetDeclaredConstructors(Class<T> clazz)
<T> Field	doPrivilegedGetDeclaredField(Class<T> clazz, String name)
<T> Field[]	doPrivilegedGetDeclaredFields(Class<T> clazz)
<T> Method	doPrivilegedGetDeclaredMethod(Class<T> clazz, String name, Class<?>... parameterTypes)
<T> Method[]	doPrivilegedGetDeclaredMethods(Class<T> clazz)
Properties	doPrivilegedGetSystemProperties()
String	doPrivilegedGetSystemProperty(String propertyName, String defaultValue)
boolean	doPrivilegedIsAccessible(AccessibleObject obj)
<T> T	doPrivilegedObjectCreate(Class<T> clazz)
void	doPrivilegedSetAccessible(AccessibleObject obj, boolean flag)
void	doPrivilegedSetSystemProperty(String propertyName, String value)
Principal	getCurrentPrincipal() Gets the current caller identity.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ManagedSecurityService

public ManagedSecurityService()

Method Detail

getCurrentPrincipal

public Principal getCurrentPrincipal()

Description copied from interface: SecurityService

Gets the current caller identity.

Specified by:

getCurrentPrincipal in interface SecurityService

Returns:

current caller identity or null if none provided.

doPrivilegedGetDeclaredConstructor

public <T> Constructor<T> doPrivilegedGetDeclaredConstructor(Class<T> clazz,
                                                             Class<?>... parameterTypes)

Specified by:

doPrivilegedGetDeclaredConstructor in interface SecurityService

See Also:

Class.getDeclaredConstructor(Class[])

doPrivilegedGetConstructor

public <T> Constructor<T> doPrivilegedGetConstructor(Class<T> clazz,
                                                     Class<?>... parameterTypes)

Specified by:

doPrivilegedGetConstructor in interface SecurityService

See Also:

Class.getDeclaredConstructor(Class[])

doPrivilegedGetDeclaredConstructors

public <T> Constructor<?>[] doPrivilegedGetDeclaredConstructors(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredConstructors in interface SecurityService

See Also:

Class.getDeclaredConstructors()

doPrivilegedGetDeclaredMethod

public <T> Method doPrivilegedGetDeclaredMethod(Class<T> clazz,
                                                String name,
                                                Class<?>... parameterTypes)

Specified by:

doPrivilegedGetDeclaredMethod in interface SecurityService

See Also:

Class.getDeclaredMethod(String, Class[])

doPrivilegedGetDeclaredMethods

public <T> Method[] doPrivilegedGetDeclaredMethods(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredMethods in interface SecurityService

See Also:

Class.getDeclaredMethods()

doPrivilegedGetDeclaredField

public <T> Field doPrivilegedGetDeclaredField(Class<T> clazz,
                                              String name)

Specified by:

doPrivilegedGetDeclaredField in interface SecurityService

See Also:

Class.getDeclaredField(String)

doPrivilegedGetDeclaredFields

public <T> Field[] doPrivilegedGetDeclaredFields(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredFields in interface SecurityService

See Also:

Class.getDeclaredFields()

doPrivilegedSetAccessible

public void doPrivilegedSetAccessible(AccessibleObject obj,
                                      boolean flag)

Specified by:

doPrivilegedSetAccessible in interface SecurityService

See Also:

AccessibleObject.setAccessible(boolean)

doPrivilegedIsAccessible

public boolean doPrivilegedIsAccessible(AccessibleObject obj)

Specified by:

doPrivilegedIsAccessible in interface SecurityService

See Also:

AccessibleObject.isAccessible()

doPrivilegedObjectCreate

public <T> T doPrivilegedObjectCreate(Class<T> clazz)
                               throws PrivilegedActionException,
                                      IllegalAccessException,
                                      InstantiationException

Specified by:

doPrivilegedObjectCreate in interface SecurityService

Throws:

PrivilegedActionException

IllegalAccessException

InstantiationException

See Also:

Class.newInstance()

doPrivilegedSetSystemProperty

public void doPrivilegedSetSystemProperty(String propertyName,
                                          String value)

Specified by:

doPrivilegedSetSystemProperty in interface SecurityService

See Also:

Class#

doPrivilegedGetSystemProperty

public String doPrivilegedGetSystemProperty(String propertyName,
                                            String defaultValue)

Specified by:

doPrivilegedGetSystemProperty in interface SecurityService

See Also:

System.getProperty(String, String)

doPrivilegedGetSystemProperties

public Properties doPrivilegedGetSystemProperties()

Specified by:

doPrivilegedGetSystemProperties in interface SecurityService

See Also:

System.getProperties()