public class ProtectionDomain extends Object
A static set of permissions can be bound to a ProtectionDomain when it is constructed; such permissions are granted to the domain regardless of the Policy in force. However, to support dynamic security policies, a ProtectionDomain can also be constructed such that it is dynamically mapped to a set of permissions by the current Policy whenever a permission is checked.
Constructor | Description |
---|---|
ProtectionDomain(CodeSource codesource,
PermissionCollection permissions) |
Creates a new ProtectionDomain with the given CodeSource and
Permissions.
|
ProtectionDomain(CodeSource codesource,
PermissionCollection permissions,
ClassLoader classloader,
Principal[] principals) |
Creates a new ProtectionDomain qualified by the given CodeSource,
Permissions, ClassLoader and array of Principals.
|
Modifier and Type | Method | Description |
---|---|---|
ClassLoader |
getClassLoader() |
Returns the ClassLoader of this domain.
|
CodeSource |
getCodeSource() |
Returns the CodeSource of this domain.
|
PermissionCollection |
getPermissions() |
Returns the static permissions granted to this domain.
|
Principal[] |
getPrincipals() |
Returns an array of principals for this domain.
|
boolean |
implies(Permission perm) |
Check and see if this ProtectionDomain implies the permissions
expressed in the Permission object.
|
boolean |
staticPermissionsOnly() |
Returns true if this domain contains only static permissions
and does not check the current
Policy at the time of
permission checking. |
String |
toString() |
Convert a ProtectionDomain to a String.
|
public ProtectionDomain(CodeSource codesource, PermissionCollection permissions)
setReadOnly()
will be called on the passed in
Permissions object.
The permissions granted to this domain are static, i.e.
invoking the staticPermissionsOnly()
method returns true.
They contain only the ones passed to this constructor and
the current Policy will not be consulted.
codesource
- the codesource associated with this domainpermissions
- the permissions granted to this domainpublic ProtectionDomain(CodeSource codesource, PermissionCollection permissions, ClassLoader classloader, Principal[] principals)
setReadOnly()
will be called on the passed in Permissions object.
The permissions granted to this domain are dynamic, i.e.
invoking the staticPermissionsOnly()
method returns false.
They include both the static permissions passed to this constructor,
and any permissions granted to this domain by the current Policy at the
time a permission is checked.
This constructor is typically used by
ClassLoaders
and DomainCombiners
which delegate to
Policy
to actively associate the permissions granted to
this domain. This constructor affords the
Policy provider the opportunity to augment the supplied
PermissionCollection to reflect policy changes.
codesource
- the CodeSource associated with this domainpermissions
- the permissions granted to this domainclassloader
- the ClassLoader associated with this domainprincipals
- the array of Principals associated with this
domain. The contents of the array are copied to protect against
subsequent modification.Policy.refresh()
,
Policy.getPermissions(ProtectionDomain)
public final CodeSource getCodeSource()
public final ClassLoader getClassLoader()
public final Principal[] getPrincipals()
public final PermissionCollection getPermissions()
Policy.refresh()
,
Policy.getPermissions(ProtectionDomain)
public final boolean staticPermissionsOnly()
Policy
at the time of
permission checking.public boolean implies(Permission perm)
The set of permissions evaluated is a function of whether the ProtectionDomain was constructed with a static set of permissions or it was bound to a dynamically mapped set of permissions.
If the staticPermissionsOnly()
method returns
true, then the permission will only be checked against the
PermissionCollection supplied at construction.
Otherwise, the permission will be checked against the combination of the PermissionCollection supplied at construction and the current Policy binding.
perm
- the Permission object to check.perm
is implied by this ProtectionDomain. Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2017, Oracle and/or its affiliates. 500 Oracle Parkway
Redwood Shores, CA 94065 USA. All rights reserved.
DRAFT 9-internal+0-adhoc.mlchung.jdk9-jdeps