119 lines
4.8 KiB
Java
119 lines
4.8 KiB
Java
![]() |
/*
|
||
|
* Copyright (c) 2005, 2013, Oracle and/or its affiliates. All rights reserved.
|
||
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||
|
*
|
||
|
* This code is free software; you can redistribute it and/or modify it
|
||
|
* under the terms of the GNU General Public License version 2 only, as
|
||
|
* published by the Free Software Foundation. Oracle designates this
|
||
|
* particular file as subject to the "Classpath" exception as provided
|
||
|
* by Oracle in the LICENSE file that accompanied this code.
|
||
|
*
|
||
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
||
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
||
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||
|
* version 2 for more details (a copy is included in the LICENSE file that
|
||
|
* accompanied this code).
|
||
|
*
|
||
|
* You should have received a copy of the GNU General Public License version
|
||
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
||
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
||
|
*
|
||
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
||
|
* or visit www.oracle.com if you need additional information or have any
|
||
|
* questions.
|
||
|
*/
|
||
|
|
||
|
|
||
|
package java.security;
|
||
|
|
||
|
/**
|
||
|
* This class defines the <i>Service Provider Interface</i> (<b>SPI</b>)
|
||
|
* for the {@code Policy} class.
|
||
|
* All the abstract methods in this class must be implemented by each
|
||
|
* service provider who wishes to supply a Policy implementation.
|
||
|
*
|
||
|
* <p> Subclass implementations of this abstract class must provide
|
||
|
* a public constructor that takes a {@code Policy.Parameters}
|
||
|
* object as an input parameter. This constructor also must throw
|
||
|
* an IllegalArgumentException if it does not understand the
|
||
|
* {@code Policy.Parameters} input.
|
||
|
*
|
||
|
*
|
||
|
* @since 1.6
|
||
|
*/
|
||
|
|
||
|
public abstract class PolicySpi {
|
||
|
|
||
|
/**
|
||
|
* Check whether the policy has granted a Permission to a ProtectionDomain.
|
||
|
*
|
||
|
* @param domain the ProtectionDomain to check.
|
||
|
*
|
||
|
* @param permission check whether this permission is granted to the
|
||
|
* specified domain.
|
||
|
*
|
||
|
* @return boolean true if the permission is granted to the domain.
|
||
|
*/
|
||
|
protected abstract boolean engineImplies
|
||
|
(ProtectionDomain domain, Permission permission);
|
||
|
|
||
|
/**
|
||
|
* Refreshes/reloads the policy configuration. The behavior of this method
|
||
|
* depends on the implementation. For example, calling {@code refresh}
|
||
|
* on a file-based policy will cause the file to be re-read.
|
||
|
*
|
||
|
* <p> The default implementation of this method does nothing.
|
||
|
* This method should be overridden if a refresh operation is supported
|
||
|
* by the policy implementation.
|
||
|
*/
|
||
|
protected void engineRefresh() { }
|
||
|
|
||
|
/**
|
||
|
* Return a PermissionCollection object containing the set of
|
||
|
* permissions granted to the specified CodeSource.
|
||
|
*
|
||
|
* <p> The default implementation of this method returns
|
||
|
* Policy.UNSUPPORTED_EMPTY_COLLECTION object. This method can be
|
||
|
* overridden if the policy implementation can return a set of
|
||
|
* permissions granted to a CodeSource.
|
||
|
*
|
||
|
* @param codesource the CodeSource to which the returned
|
||
|
* PermissionCollection has been granted.
|
||
|
*
|
||
|
* @return a set of permissions granted to the specified CodeSource.
|
||
|
* If this operation is supported, the returned
|
||
|
* set of permissions must be a new mutable instance
|
||
|
* and it must support heterogeneous Permission types.
|
||
|
* If this operation is not supported,
|
||
|
* Policy.UNSUPPORTED_EMPTY_COLLECTION is returned.
|
||
|
*/
|
||
|
protected PermissionCollection engineGetPermissions
|
||
|
(CodeSource codesource) {
|
||
|
return Policy.UNSUPPORTED_EMPTY_COLLECTION;
|
||
|
}
|
||
|
|
||
|
/**
|
||
|
* Return a PermissionCollection object containing the set of
|
||
|
* permissions granted to the specified ProtectionDomain.
|
||
|
*
|
||
|
* <p> The default implementation of this method returns
|
||
|
* Policy.UNSUPPORTED_EMPTY_COLLECTION object. This method can be
|
||
|
* overridden if the policy implementation can return a set of
|
||
|
* permissions granted to a ProtectionDomain.
|
||
|
*
|
||
|
* @param domain the ProtectionDomain to which the returned
|
||
|
* PermissionCollection has been granted.
|
||
|
*
|
||
|
* @return a set of permissions granted to the specified ProtectionDomain.
|
||
|
* If this operation is supported, the returned
|
||
|
* set of permissions must be a new mutable instance
|
||
|
* and it must support heterogeneous Permission types.
|
||
|
* If this operation is not supported,
|
||
|
* Policy.UNSUPPORTED_EMPTY_COLLECTION is returned.
|
||
|
*/
|
||
|
protected PermissionCollection engineGetPermissions
|
||
|
(ProtectionDomain domain) {
|
||
|
return Policy.UNSUPPORTED_EMPTY_COLLECTION;
|
||
|
}
|
||
|
}
|