Examples of java.security.Policy$PolicyInfo

java.security.Policy
A Policy object is responsible for determining whether code executing in the Java runtime environment has permission to perform a security-sensitive operation.
There is only one Policy object installed in the runtime at any given time. A Policy object can be installed by calling the {@code setPolicy} method. The installed Policy object can beobtained by calling the {@code getPolicy} method.
If no Policy object has been installed in the runtime, a call to {@code getPolicy} installs an instance of the default Policyimplementation (a default subclass implementation of this abstract class). The default Policy implementation can be changed by setting the value of the {@code policy.provider} security property to the fully qualifiedname of the desired Policy subclass implementation.
Application code can directly subclass Policy to provide a custom implementation. In addition, an instance of a Policy object can be constructed by invoking one of the {@code getInstance} factory methodswith a standard type. The default policy type is "JavaPolicy".
Once a Policy instance has been installed (either by default, or by calling {@code setPolicy}), the Java runtime invokes its {@code implies} method when it needs todetermine whether executing code (encapsulated in a ProtectionDomain) can perform SecurityManager-protected operations. How a Policy object retrieves its policy data is up to the Policy implementation itself. The policy data may be stored, for example, in a flat ASCII file, in a serialized binary file of the Policy class, or in a database.
The {@code refresh} method causes the policy object torefresh/reload its data. This operation is implementation-dependent. For example, if the policy object stores its data in configuration files, calling {@code refresh} will cause it to re-read the configurationpolicy files. If a refresh operation is not supported, this method does nothing. Note that refreshed policy may not have an effect on classes in a particular ProtectionDomain. This is dependent on the Policy provider's implementation of the {@code implies}method and its PermissionCollection caching strategy. @author Roland Schemers @author Gary Ellison @see java.security.Provider @see java.security.ProtectionDomain @see java.security.Permission @see java.security.Security security properties


        // Setup the PermissionCollection for this web app context
        // based on the permissions configured for the root of the
        // web app context directory, then add a file read permission
        // for that directory.
        Policy policy = Policy.getPolicy();
        if( policy != null ) {
            try {          
                // Get the permissions for the web app context
                String docBase = context.getRealPath("/");
                if( docBase == null ) {
                    docBase = options.getScratchDir().toString();
                }
                String codeBase = docBase;
                if (!codeBase.endsWith(File.separator)){
                    codeBase = codeBase + File.separator;
                }
                File contextDir = new File(codeBase);
                URL url = contextDir.getCanonicalFile().toURL();
                codeSource = new CodeSource(url,null);
                permissionCollection = policy.getPermissions(codeSource);


                // Create a file read permission for web app context directory
                if (!docBase.endsWith(File.separator)){
                    permissionCollection.add
                        (new FilePermission(docBase,"read"));

View Full Code Here

     * @return PermissionCollection for CodeSource
     */
    protected final PermissionCollection getPermissions(CodeSource codeSource) {
        if (!policy_refresh) {
            // Refresh the security policies
            Policy policy = Policy.getPolicy();
            policy.refresh();
            policy_refresh = true;
        }
        String codeUrl = codeSource.getLocation().toString();
        PermissionCollection pc;
        if ((pc = (PermissionCollection)loaderPC.get(codeUrl)) == null) {

View Full Code Here


        try {
            // The policy file may have been modified to adjust 
            // permissions, so we're reloading it when loading or 
            // reloading a Context
            Policy policy = Policy.getPolicy();
            policy.refresh();
        } catch (AccessControlException e) {
            // Some policy files may restrict this, even for the core,
            // so this exception is ignored
        }

View Full Code Here


        // Setup the PermissionCollection for this web app context
        // based on the permissions configured for the root of the
        // web app context directory, then add a file read permission
        // for that directory.
        Policy policy = Policy.getPolicy();
        if( policy != null ) {
            try {          
                // Get the permissions for the web app context
                String docBase = context.getRealPath("/");
                if( docBase == null ) {
                    docBase = options.getScratchDir().toString();
                }
                String codeBase = docBase;
                if (!codeBase.endsWith(File.separator)){
                    codeBase = codeBase + File.separator;
                }
                File contextDir = new File(codeBase);
                URL url = contextDir.getCanonicalFile().toURL();
                codeSource = new CodeSource(url,null);
                permissionCollection = policy.getPermissions(codeSource);


                // Create a file read permission for web app context directory
                if (!docBase.endsWith(File.separator)){
                    permissionCollection.add
                        (new FilePermission(docBase,"read"));

View Full Code Here


        try {
            // The policy file may have been modified to adjust 
            // permissions, so we're reloading it when loading or 
            // reloading a Context
            Policy policy = Policy.getPolicy();
            policy.refresh();
        } catch (AccessControlException e) {
            // Some policy files may restrict this, even for the core,
            // so this exception is ignored
        }

View Full Code Here

    /**
     * @tests java.security.Policy#setPolicy(java.security.Policy)
     */
    public void test_setPolicyLjava_security_Policy() {
        SecurityManager old = System.getSecurityManager();
        Policy oldPolicy = Policy.getPolicy();
        try {
            SecurityChecker checker = new SecurityChecker(
                new SecurityPermission("setPolicy"), true);
            System.setSecurityManager(checker);
            Policy custom = new TestProvider();
            Policy.setPolicy(custom);
            assertTrue(checker.checkAsserted);
            assertSame(custom, Policy.getPolicy());


            checker.reset();

View Full Code Here

    /**
     * @tests java.security.Policy#getPolicy()
     */
    public void test_getPolicy() {
        SecurityManager old = System.getSecurityManager();
        Policy oldPolicy = Policy.getPolicy();
        try {
            Policy.setPolicy(new TestProvider());
            SecurityChecker checker = new SecurityChecker(
                new SecurityPermission("getPolicy"), true);
            System.setSecurityManager(checker);

View Full Code Here

     * @tests java.security.Policy#getPolicy()
     * @tests java.security.Policy#setPolicy()
     */
    public void testResetingPolicyToDefault() {


        Policy oldPolicy = Policy.getPolicy();
        assertNotNull("Got a null system security policy", oldPolicy);


        try {


            Policy.setPolicy(null); // passing null resets policy
            Policy newPolicy = Policy.getPolicy();


            assertNotNull(newPolicy);
            assertNotSame(oldPolicy, newPolicy);


            assertEquals("Policy class name", Security
                    .getProperty("policy.provider"), newPolicy.getClass()
                    .getName());
        } finally {
            Policy.setPolicy(oldPolicy);
        }
    }

View Full Code Here


        // Regression for HARMONY-1963 and HARMONY-2910
        String policyFile = Support_Resources
                .getAbsoluteResourcePath("PolicyTest.txt");
        String oldSysProp = System.getProperty(JAVA_SECURITY_POLICY);
        Policy oldPolicy = Policy.getPolicy();


        try {
            System.setProperty(JAVA_SECURITY_POLICY, policyFile);


            // test: absolute paths

View Full Code Here

            String codeBaseURL) throws Exception {


        Policy.setPolicy(null); //reset policy
        System.setProperty("test.bin.dir", codeBaseURL);


        Policy p = Policy.getPolicy();
        CodeSource codeSource = new CodeSource(
                new URL("file:" + codeSourceURL),
                (java.security.cert.Certificate[]) null);
        
        PermissionCollection pCollection = p.getPermissions(codeSource);
        Enumeration<Permission> elements = pCollection.elements();


        SecurityPermission perm = new SecurityPermission(
                "codeBaseForPolicyTest");

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of java.security.Policy$PolicyInfo

com.google.appengine.tools.development.IsolatedAppClassLoader

com.google.common.base.FinalizableReferenceQueueClassLoaderUnloadingTest

com.google.gwt.thirdparty.org.apache.catalina.loader.WebappClassLoader

com.hp.hpl.jena.gvs.services.http.test.SecurityTest

com.sun.corba.se.impl.orbutil.ORBUtility

com.sun.enterprise.appclient.jws.boot.JWSACCMain

com.sun.enterprise.web.jsp.JspServlet

com.sun.jini.qa.harness.MergedPolicyProvider

com.sun.jini.start.ActivateWrapper

com.sun.jini.start.AggregatePolicyProvider

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.