public ApplicationPolicyConfigurationManager(Map contextIdToPermissionsMap, Map principalRoleMap, Map roleDesignates, ClassLoader cl) throws PolicyContextException, ClassNotFoundException {

        Thread currentThread = Thread.currentThread();

        ClassLoader oldClassLoader = currentThread.getContextClassLoader();

        currentThread.setContextClassLoader(cl);

        try {

            policyConfigurationFactory = PolicyConfigurationFactory.getPolicyConfigurationFactory();

        } finally {

            currentThread.setContextClassLoader(oldClassLoader);

        }

        for (Iterator iterator = contextIdToPermissionsMap.entrySet().iterator(); iterator.hasNext();) {

            Map.Entry entry = (Map.Entry) iterator.next();

            String contextID = (String) entry.getKey();

            ComponentPermissions componentPermissions = (ComponentPermissions) entry.getValue();

//                throw new IllegalStateException("JACC implementation is invalid: returns different instances of PolicyConfiguration for the same contextID");

//            }

            contextIdToPolicyConfigurationMap.put(contextID, policyConfiguration);

            policyConfiguration.addToExcludedPolicy(componentPermissions.getExcludedPermissions());

   public void deploy(DeploymentUnit unit, JBossAppMetaData deployment) throws DeploymentException

   {

      //Perform JACC Policy Configuration

      String contextID =  shortNameFromDeploymentName(unit.getSimpleName());

      try

      {

         pcFactory = PolicyConfigurationFactory.getPolicyConfigurationFactory();

         unit.addAttachment(PolicyConfiguration.class, pc);

      }

      catch (PolicyContextException e)

      {

         throw new DeploymentException("PolicyContextException generated in deploy", e);

   public void create()

   {

      try

      {

        

         createPermissions(metaData, policyConfiguration);

      }

      catch (ClassNotFoundException e)

      {

    * @throws Exception

    */

   public void testPolicyConfiguration() throws Exception

   {

      EJBMethodPermission someEJB = new EJBMethodPermission("someEJB", null);

      pc.addToExcludedPolicy(someEJB);

      pc.commit();

      Policy sysPolicy = Policy.getPolicy();

      assertTrue("Policy isa DelegatingPolicy", sysPolicy instanceof DelegatingPolicy);

      sysPolicy.refresh();

      // Act like the ejb container and check a permission

      PolicyContext.setContextID("context-a");

      EJBMethodPermission methodX = new EJBMethodPermission("someEJB", "methodX,,int");

      assertTrue("methodX denied", sysPolicy.implies(null, methodX) == false);

      pc.addToUncheckedPolicy(someEJB);

      pc.commit();

      sysPolicy.refresh();

      assertTrue("methodX allowed", sysPolicy.implies(null, methodX) == true);

      pc.delete();

      pc.addToRole("callerX", someEJB);

      pc.commit();

      sysPolicy.refresh();

      SimplePrincipal[] callers = {new SimplePrincipal("callerX")};

      ProtectionDomain pd = new ProtectionDomain(null, null, null, callers);

    * @throws Exception

    */

   public void testOpenConfigurations() throws Exception

   {

      EJBMethodPermission someEJB = new EJBMethodPermission("someEJB", null);

      pc.addToRole("callerX", someEJB);

      Policy sysPolicy = Policy.getPolicy();

      pc.addToUncheckedPolicy(someEJB);

      sysPolicy.refresh();

      EJBMethodPermission methodX = new EJBMethodPermission("someEJB", "methodX,,int");

      // This perm should be denied since the policy config has not been comitted

      boolean implied = sysPolicy.implies(null, methodX);

   }

   public void testSubjectDoAs() throws Exception

   {

      EJBMethodPermission someEJB = new EJBMethodPermission("someEJB", null);

      pc.addToRole("callerX", someEJB);

      pc.commit();

      log.debug("EJBMethodPermission.CS: "+EJBMethodPermission.class.getProtectionDomain());

             * the policy configuration from the factory and then we commit.

             */

            String jaccContextIdChild = pcfm.getJaccContextID();

           

            if(pcChild != null)

            {

               parentPC.linkConfiguration(pcChild);

               //Commit the linked PC

               pcChild.commit();

   private void createPolicyConfiguration() throws PolicyContextException, ClassNotFoundException

   {

      if(parentPC == null)

      {

      }

   }

      String contextID = unit.getName();

      PolicyConfiguration pc = null;

      try

      {

      }

      catch (Exception e)

      {

         throw new RuntimeException("failed to initialize JACC for unit: " + unit.getName(), e);

      }

   void createMissingPermissions(Container con, BeanMetaData bean) throws ClassNotFoundException,

         PolicyContextException

   {

      String contextID = con.getJaccContextID();

      Class clazz = con.getHomeClass();

      // If there is no security domain mark all methods as unchecked

      boolean hasSecurityDomain = con.getSecurityManager() != null;

      boolean exclude = hasSecurityDomain ? bean.isExcludeMissingMethods() : false;