Examples of org.hsqldb.server.ServerAcl$AclEntry

org.hsqldb.server.ServerAcl
A list of ACL permit and deny entries with a permitAccess method which tells whether candidate addresses are permitted or denied by this ACL list.
The ACL file is reloaded whenever a modification to it is detected. If you copy in a file with an older file date, you will need to touch it.

The public runtime method is permitAccess(). The public setup method is the constructor.

Each non-comment line in the ACL file must be a rule of the format:
```
 {allow|deny} [/significant-bits] 
```
For example
```
 allow ahostname deny ahost.domain.com allow 127.0.0.1 allow 2001:db8::/32 
```
In order to detect bit specification mistakes, we require that non-significant bits be zero in the values. An undesirable consequence of this is, you can't use a specification like the following to mean "all of the hosts on the same network as x.admc.com":
```
 allow x.admc.com/24 
```
@see #ServerAcl(File) @see #permitAccess

        file = File.createTempFile("zero", ".txt");


        file.deleteOnExit();
        (new FileWriter(file)).close();


        aclDefault = new ServerAcl(file);


        if (verbose) {
            aclDefault.setPrintWriter(new PrintWriter(System.out));
        }


        acls.clear();


        file = File.createTempFile("aclDenyAll1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Deny all test ACL\n");
        pw.println("deny 0.0.0.0/0");
        pw.close();
        acls.add(new ServerAcl(file));


        aclDenyAlls = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclDenyAlls.length; i++) {
                aclDenyAlls[i].setPrintWriter(new PrintWriter(System.out));
            }
        }


        acls.clear();


        file = File.createTempFile("aclPermitLocalhost1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Permit Localhost test ACL\n");
        pw.println("permit 127.0.0.1");
        pw.close();
        acls.add(new ServerAcl(file));


        file = File.createTempFile("aclPermitLocalhost2", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Permit Localhost test ACL\n");
        pw.println("permit 127.0.0.1/32");
        pw.close();
        acls.add(new ServerAcl(file));


        aclPermitLocalhosts = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclPermitLocalhosts.length; i++) {
                aclPermitLocalhosts[i].setPrintWriter(
                    new PrintWriter(System.out));
            }
        }


        acls.clear();


        file = File.createTempFile("aclPermitLocalNet1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Permit Local Net test ACL\n");
        pw.println("permit 127.0.0.0/24");
        pw.close();
        acls.add(new ServerAcl(file));


        aclPermitLocalNets = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclPermitLocalNets.length; i++) {
                aclPermitLocalNets[i].setPrintWriter(
                    new PrintWriter(System.out));
            }
        }


        acls.clear();


        file = File.createTempFile("aclDenyLocalNet1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Deny Local Net test ACL\n");
        pw.println("deny 127.0.0.0/24");
        pw.println("allow 0.0.0.0/0");
        pw.close();
        acls.add(new ServerAcl(file));


        aclDenyLocalNets = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclDenyLocalNets.length; i++) {
                aclDenyLocalNets[i].setPrintWriter(
                    new PrintWriter(System.out));
            }
        }


        acls.clear();


        file = File.createTempFile("aclDenyLocalhost1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Deny Localhost test ACL\n");
        pw.println("deny 127.0.0.1/32");
        pw.println("allow 0.0.0.0/0");
        pw.close();
        acls.add(new ServerAcl(file));


        aclDenyLocalhosts = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclDenyLocalhosts.length; i++) {
                aclDenyLocalhosts[i].setPrintWriter(
                    new PrintWriter(System.out));
            }
        }


        acls.clear();


        file = File.createTempFile("aclPermitAll1", ".txt");


        file.deleteOnExit();


        pw = new PrintWriter(new FileWriter(file));


        pw.println("# Permit all test ACL\n");
        pw.println("permit 0.0.0.0/0");
        pw.close();
        acls.add(new ServerAcl(file));


        aclPermitAlls = (ServerAcl[]) acls.toArray(new ServerAcl[0]);


        if (verbose) {
            for (int i = 0; i < aclPermitAlls.length; i++) {

View Full Code Here

                    aclDefault.permitAccess(otherHostByAddr.getAddress()));
    }


    public void testDenyAllWithNames() {


        ServerAcl acl;


        for (int i = 0; i < aclDenyAlls.length; i++) {
            acl = (ServerAcl) aclDenyAlls[i];


            assertFalse("Permitting access from localhost with deny-all ACL",
                        acl.permitAccess(localhostByName.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testDenyAllWithIPs() {


        ServerAcl acl;


        for (int i = 0; i < aclDenyAlls.length; i++) {
            acl = (ServerAcl) aclDenyAlls[i];


            assertFalse("Permitting access from localhost with deny-all ACL",
                        acl.permitAccess(localhostByAddr.getAddress()));
            assertFalse("Permitting access from other host with deny-all ACL",
                        acl.permitAccess(otherHostByAddr.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testLocalhostOnlyWithNames() {


        ServerAcl acl;


        for (int i = 0; i < aclPermitLocalhosts.length; i++) {
            acl = (ServerAcl) aclPermitLocalhosts[i];


            assertTrue(
                "Denying access from localhost with localhost-permit ACL",
                acl.permitAccess(localhostByName.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testLocalhostOnlyWithIPs() {


        ServerAcl acl;


        for (int i = 0; i < aclPermitLocalhosts.length; i++) {
            acl = (ServerAcl) aclPermitLocalhosts[i];


            assertTrue(
                "Denying access from localhost with localhost-permit ACL",
                acl.permitAccess(localhostByAddr.getAddress()));
            assertFalse(
                "Permitting access from other host with localhost-permit ACL",
                acl.permitAccess(otherHostByAddr.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testNoLocalhostOnlyWithNames() {


        ServerAcl acl;


        for (int i = 0; i < aclDenyLocalhosts.length; i++) {
            acl = (ServerAcl) aclDenyLocalhosts[i];


            assertFalse(
                "Permitting access from localhost with localhost-deny ACL",
                acl.permitAccess(localhostByName.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testNoLocalhostOnlyWithIPs() {


        ServerAcl acl;


        for (int i = 0; i < aclDenyLocalhosts.length; i++) {
            acl = (ServerAcl) aclDenyLocalhosts[i];


            assertFalse(
                "Permitting access from localhost with localhost-deny ACL",
                acl.permitAccess(localhostByAddr.getAddress()));
            assertTrue(
                "Denying access from other host with localhost-deny ACL",
                acl.permitAccess(otherHostByAddr.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testLocalNetOnlyWithNames() {


        ServerAcl acl;


        for (int i = 0; i < aclPermitLocalNets.length; i++) {
            acl = (ServerAcl) aclPermitLocalNets[i];


            assertTrue("Denying access from localNet with localNet-permit ACL",
                       acl.permitAccess(localhostByName.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testLocalNetOnlyWithIPs() {


        ServerAcl acl;


        for (int i = 0; i < aclPermitLocalNets.length; i++) {
            acl = (ServerAcl) aclPermitLocalNets[i];


            assertTrue("Denying access from localNet with localNet-permit ACL",
                       acl.permitAccess(localhostByAddr.getAddress()));
            assertFalse(
                "Permitting access from other Net with localNet-permit ACL",
                acl.permitAccess(otherHostByAddr.getAddress()));
        }
    }

View Full Code Here

        }
    }


    public void testNoLocalNetOnlyWithNames() {


        ServerAcl acl;


        for (int i = 0; i < aclDenyLocalNets.length; i++) {
            acl = (ServerAcl) aclDenyLocalNets[i];


            assertFalse(
                "Permitting access from localNet with localNet-deny ACL",
                acl.permitAccess(localhostByName.getAddress()));
        }
    }

View Full Code Here

0 1 2

TOP

Related Classes of org.hsqldb.server.ServerAcl$AclEntry

org.hsqldb.test.TestAcl

java.util.ArrayList

java.io.File

java.io.InputStreamReader

java.io.FileReader

java.io.IOException

java.util.StringTokenizer

java.util.List

java.io.PrintWriter

java.io.BufferedReader

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.