- java.lang.Object
-
- java.security.ProtectionDomain
-
public class ProtectionDomain extends Object
The ProtectionDomain class encapsulates the characteristics of a domain, which encloses a set of classes whose instances are granted a set of permissions when being executed on behalf of a given set of Principals.A static set of permissions can be bound to a ProtectionDomain when it is constructed; such permissions are granted to the domain regardless of the Policy in force. However, to support dynamic security policies, a ProtectionDomain can also be constructed such that it is dynamically mapped to a set of permissions by the current Policy whenever a permission is checked.
-
-
Constructor Summary
Constructors Constructor and Description ProtectionDomain(CodeSource codesource, PermissionCollection permissions)
Creates a new ProtectionDomain with the given CodeSource and Permissions.ProtectionDomain(CodeSource codesource, PermissionCollection permissions, ClassLoader classloader, Principal[] principals)
Creates a new ProtectionDomain qualified by the given CodeSource, Permissions, ClassLoader and array of Principals.
-
Method Summary
Methods Modifier and Type Method and Description ClassLoader
getClassLoader()
Returns the ClassLoader of this domain.CodeSource
getCodeSource()
Returns the CodeSource of this domain.PermissionCollection
getPermissions()
Returns the static permissions granted to this domain.Principal[]
getPrincipals()
Returns an array of principals for this domain.boolean
implies(Permission permission)
Check and see if this ProtectionDomain implies the permissions expressed in the Permission object.String
toString()
Convert a ProtectionDomain to a String.
-
-
-
Constructor Detail
-
ProtectionDomain
public ProtectionDomain(CodeSource codesource, PermissionCollection permissions)
Creates a new ProtectionDomain with the given CodeSource and Permissions. If the permissions object is not null, thensetReadOnly())
will be called on the passed in Permissions object. The only permissions granted to this domain are the ones specified; the current Policy will not be consulted.- Parameters:
codesource
- the codesource associated with this domainpermissions
- the permissions granted to this domain
-
ProtectionDomain
public ProtectionDomain(CodeSource codesource, PermissionCollection permissions, ClassLoader classloader, Principal[] principals)
Creates a new ProtectionDomain qualified by the given CodeSource, Permissions, ClassLoader and array of Principals. If the permissions object is not null, thensetReadOnly()
will be called on the passed in Permissions object. The permissions granted to this domain are dynamic; they include both the static permissions passed to this constructor, and any permissions granted to this domain by the current Policy at the time a permission is checked.This constructor is typically used by
ClassLoaders
andDomainCombiners
which delegate toPolicy
to actively associate the permissions granted to this domain. This constructor affords the Policy provider the opportunity to augment the supplied PermissionCollection to reflect policy changes.- Parameters:
codesource
- the CodeSource associated with this domainpermissions
- the permissions granted to this domainclassloader
- the ClassLoader associated with this domainprincipals
- the array of Principals associated with this domain. The contents of the array are copied to protect against subsequent modification.- Since:
- 1.4
- See Also:
Policy.refresh()
,Policy.getPermissions(ProtectionDomain)
-
-
Method Detail
-
getCodeSource
public final CodeSource getCodeSource()
Returns the CodeSource of this domain.- Returns:
- the CodeSource of this domain which may be null.
- Since:
- 1.2
-
getClassLoader
public final ClassLoader getClassLoader()
Returns the ClassLoader of this domain.- Returns:
- the ClassLoader of this domain which may be null.
- Since:
- 1.4
-
getPrincipals
public final Principal[] getPrincipals()
Returns an array of principals for this domain.- Returns:
- a non-null array of principals for this domain. Returns a new array each time this method is called.
- Since:
- 1.4
-
getPermissions
public final PermissionCollection getPermissions()
Returns the static permissions granted to this domain.- Returns:
- the static set of permissions for this domain which may be null.
- See Also:
Policy.refresh()
,Policy.getPermissions(ProtectionDomain)
-
implies
public boolean implies(Permission permission)
Check and see if this ProtectionDomain implies the permissions expressed in the Permission object.The set of permissions evaluated is a function of whether the ProtectionDomain was constructed with a static set of permissions or it was bound to a dynamically mapped set of permissions.
If the ProtectionDomain was constructed to a
statically bound
PermissionCollection then the permission will only be checked against the PermissionCollection supplied at construction.However, if the ProtectionDomain was constructed with the constructor variant which supports
dynamically binding
permissions, then the permission will be checked against the combination of the PermissionCollection supplied at construction and the current Policy binding.- Parameters:
permission
- the Permission object to check.- Returns:
- true if "permission" is implicit to this ProtectionDomain.
-
-
Document created the 11/06/2005, last modified the 04/03/2020
Source of the printed document:https://www.gaudry.be/en/java-api-rf-java/security/protectiondomain.html
The infobrol is a personal site whose content is my sole responsibility. The text is available under CreativeCommons license (BY-NC-SA). More info on the terms of use and the author.
References
These references and links indicate documents consulted during the writing of this page, or which may provide additional information, but the authors of these sources can not be held responsible for the content of this page.
The author This site is solely responsible for the way in which the various concepts, and the freedoms that are taken with the reference works, are presented here. Remember that you must cross multiple source information to reduce the risk of errors.