Examples of java.lang.reflect.ReflectPermission

java.lang.reflect.ReflectPermission

The Permission class for reflective operations. A ReflectPermission is a named permission and has no actions. The only name currently defined is suppressAccessChecks, which allows suppressing the standard Java language access checks -- for public, default (package) access, protected, and private members -- performed by reflected objects at their point of use.

The following table provides a summary description of what the permission allows, and discusses the risks of granting code the permission.

Permission Target Name	What the Permission Allows	Risks of Allowing this Permission
suppressAccessChecks	ability to access fields and invoke methods in a class. Note that this includes not only public, but protected and private fields and methods as well.	This is dangerous in that information (possibly confidential) and methods normally unavailable would be accessible to malicious code.

@see java.security.Permission @see java.security.BasicPermission @see AccessibleObject @see Field#get @see Field#set @see Method#invoke @see Constructor#newInstance @since 1.2


      AccessibleObject class_constructor =
  Class.class.getDeclaredConstructors()[0];


      Permission[] suppressAccessChecks = new Permission[] {
   new ReflectPermission("suppressAccessChecks")};


      TestSecurityManager sm = new TestSecurityManager(harness);
      try {
  sm.install();

View Full Code Here

        result.add(new TcPermission("http://example.org/read/graph", "read"));
        result.add(new TcPermission("http://example.org/area/allowed/*", "readwrite"));
        result.add(new TcPermission("urn:x-localinstance:/graph-access.graph", "readwrite"));
        //result.add(new AllPermission());
        result.add(new RuntimePermission("*"));
        result.add(new ReflectPermission("suppressAccessChecks"));
        result.add(new PropertyPermission("*", "read"));
        //(java.util.PropertyPermission line.separator read)
        result.add(new FilePermission("/-", "read,write"));
        return result;
      }

View Full Code Here

    permissions.add(new RuntimePermission("getClassLoader"));
    permissions.add(new RuntimePermission("setContextClassLoader"));
    permissions.add(new RuntimePermission("createClassLoader"));
    permissions.add(new RuntimePermission("getProtectionDomain"));
    permissions.add(new RuntimePermission("accessDeclaredMembers"));
    permissions.add(new ReflectPermission("suppressAccessChecks"));
    permissions.add(new LoggingPermission("control", ""));
    permissions.add(new RuntimePermission("getStackTrace"));
    permissions.add(new RuntimePermission("getenv.*"));
    permissions.add(new RuntimePermission("setIO"));
    permissions.add(new PropertyPermission("*", "read,write"));

View Full Code Here

        sm.addPermission(source, new PropertyPermission("java.security.debug", "read"));
        sm.addPermission(source, new PropertyPermission("javax.xml.datatype.DatatypeFactory", "read"));
        sm.addPermission(source, new PropertyPermission("jaxp.debug", "read"));
        sm.addPermission(source, new PropertyPermission("sun.boot.class.path", "read"));
        sm.addPermission(source, new PropertyPermission("sun.timezone.ids.oldmapping", "read"));
        sm.addPermission(source, new ReflectPermission("suppressAccessChecks"));
        sm.addPermission(source, new NetPermission("specifyStreamHandler"));
        sm.setReadOnly();
        System.setSecurityManager(sm);


        // uses implicit Sun14ReflectionProvider in JDK >= 1.4, since it has the appropriate

View Full Code Here

        sm.addPermission(source, new PropertyPermission("java.security.debug", "read"));
        sm.addPermission(source, new PropertyPermission("javax.xml.datatype.DatatypeFactory", "read"));
        sm.addPermission(source, new PropertyPermission("jaxp.debug", "read"));
        sm.addPermission(source, new PropertyPermission("sun.boot.class.path", "read"));
        sm.addPermission(source, new PropertyPermission("sun.timezone.ids.oldmapping", "read"));
        sm.addPermission(source, new ReflectPermission("suppressAccessChecks"));
        sm.addPermission(source, new NetPermission("specifyStreamHandler"));
        sm.setReadOnly();
        System.setSecurityManager(sm);


        xstream = new XStream(new PureJavaReflectionProvider());

View Full Code Here

        sm.addPermission(source, new PropertyPermission("jaxp.debug", "read"));
        sm.addPermission(source, new PropertyPermission("maxOccurLimit", "read"));
        sm.addPermission(source, new PropertyPermission("sun.boot.class.path", "read"));
        sm.addPermission(source, new PropertyPermission("sun.timezone.ids.oldmapping", "read"));
        sm.addPermission(source, new NetPermission("specifyStreamHandler"));
        sm.addPermission(source, new ReflectPermission("suppressAccessChecks"));
        sm.setReadOnly();
        System.setSecurityManager(sm);


        xstream = new XStream(new PureJavaReflectionProvider(), new DomDriver());

View Full Code Here


   public void testCoreJavaMethodsNotMadeAccessible(final Method testMethod) {
      // a nice mock is required because plenty of other checks will be made
      SecurityManager mockSecurityManager = createNiceMock(SecurityManager.class);
      // clunky way of failing if the following method is ever called
      mockSecurityManager.checkPermission(new ReflectPermission("suppressAccessChecks"));
      expectLastCall().andStubAnswer(new IAnswer<Void>() {
            @Override
            public Void answer() throws Throwable {
               try {
                  // generate a stacktrace

View Full Code Here

        }


        private static void setInstance(ResourcesProvider provider) throws SecurityException {
            SecurityManager security = System.getSecurityManager();
            if (security != null) {
                ReflectPermission rp = new ReflectPermission("suppressAccessChecks");
                security.checkPermission(rp);
            }
            synchronized (ResourcesProvider.class) {
                ResourcesProvider.provider = provider;
            }

View Full Code Here

        }


        private static void setInstance(ServiceIteratorProvider sip) throws SecurityException {
            SecurityManager security = System.getSecurityManager();
            if (security != null) {
                ReflectPermission rp = new ReflectPermission("suppressAccessChecks");
                security.checkPermission(rp);
            }
            synchronized (sipLock) {
                ServiceIteratorProvider.sip = sip;
            }

View Full Code Here

        }


        private static void setInstance(ResourcesProvider provider) throws SecurityException {
            SecurityManager security = System.getSecurityManager();
            if (security != null) {
                ReflectPermission rp = new ReflectPermission("suppressAccessChecks");
                security.checkPermission(rp);
            }
            synchronized (ResourcesProvider.class) {
                ResourcesProvider.provider = provider;
            }

View Full Code Here

0 1 2 3 4

TOP

Related Classes of java.lang.reflect.ReflectPermission

com.google.appengine.tools.development.IsolatedAppClassLoader

com.ibatis.common.beans.ClassInfo

com.ibatis.jpetstore.domain.ClassIntrospector

com.sun.jersey.core.spi.scanning.PackageNamesScanner$ResourcesProvider

com.sun.jersey.spi.service.ServiceFinder$ServiceIteratorProvider

com.sun.xml.ws.assembler.MetroConfigLoader

com.sun.xml.ws.fault.SOAPFaultBuilder

com.thoughtworks.acceptance.SecurityManagerTest

Exceptions

gnu.testlet.java.lang.reflect.AccessibleObject.security

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.