Examples of org.osgi.service.permissionadmin.PermissionAdmin

Package org.osgi.service.permissionadmin

Examples of org.osgi.service.permissionadmin.PermissionAdmin

org.osgi.service.permissionadmin.PermissionAdmin
The Permission Admin service allows management agents to manage the permissions of bundles. There is at most one Permission Admin service present in the OSGi environment.
Access to the Permission Admin service is protected by corresponding ServicePermission. In addition AdminPermission is required to actually set permissions.
Bundle permissions are managed using a permission table. A bundle's location serves as the key into this permission table. The value of a table entry is the set of permissions (of type PermissionInfo) granted to the bundle named by the given location. A bundle may have an entry in the permission table prior to being installed in the Framework.
The permissions specified in setDefaultPermissions are used as the default permissions which are granted to all bundles that do not have an entry in the permission table.
Any changes to a bundle's permissions in the permission table will take effect no later than when bundle's java.security.ProtectionDomain is next involved in a permission check, and will be made persistent.
Only permission classes on the system classpath or from an exported package are considered during a permission check. Additionally, only permission classes that are subclasses of java.security.Permission and define a 2-argument constructor that takes a name string and an actions string can be used.
Permissions implicitly granted by the Framework (for example, a bundle's permission to access its persistent storage area) cannot be changed, and are not reflected in the permissions returned by getPermissions and getDefaultPermissions. @ThreadSafe @version $Revision: 219 $

                pw.print("not ");
            pw.println("available.");


            if (paSvc != null)
            {
                final PermissionAdmin pa = (PermissionAdmin) paSvc;
                pw.println();
                pw.println("Permission Admin");


                pw.println("  Default Permissions:");
                print(pa.getDefaultPermissions(), pw);


                final String locations[] = pa.getLocations();
                for (int i = 0; locations != null && i < locations.length; i++)
                {
                    pw.print("  Location: ");
                    pw.println(locations[i]);
                    print(pa.getPermissions(locations[i]), pw);
                }
            }


            if (cpaSvc != null)
            {

View Full Code Here

    }


    @Test
    public void testMBeanInterface() throws IOException {
        PermissionAdminMBean mBean = getMBean(PermissionAdminMBean.OBJECTNAME, PermissionAdminMBean.class);
        PermissionAdmin permAdminService = getService(PermissionAdmin.class);
        assertNotNull(permAdminService);


        String[] serviceLocation = permAdminService.getLocations();
        String[] mBeanLocations = mBean.listLocations();
        assertArrayEquals(serviceLocation, mBeanLocations);


        PermissionInfo defPerm = new PermissionInfo("AllPermission", "*", "*");
        permAdminService.setDefaultPermissions(new PermissionInfo[]{defPerm});
        PermissionInfo[] permissions = permAdminService.getDefaultPermissions();
        assertNotNull(permissions);


        String[] encoded = toEncodedPerm(permissions);
        String[] mBeanDefPermissions = mBean.listDefaultPermissions();
        assertArrayEquals(encoded, mBeanDefPermissions);
        
        Bundle a = getBundle("org.apache.aries.jmx.test.bundlea");
        assertNotNull(a);
        
        String location = a.getLocation();
        
        PermissionInfo bundleaPerm = new PermissionInfo("ServicePermission", "ServiceA", "GET");
        mBean.setPermissions(location, new String[]{bundleaPerm.getEncoded()});
        
        String[] serviceBundleaPerm = toEncodedPerm(permAdminService.getPermissions(location));
        String[] mBeanBundleaPerm = mBean.getPermissions(location);
        assertNotNull(mBeanBundleaPerm);
        assertArrayEquals(serviceBundleaPerm, mBeanBundleaPerm);
        
        PermissionInfo defaultPerm = new PermissionInfo("AllPermission", "*", "GET");
        mBean.setDefaultPermissions(new String[]{defaultPerm.getEncoded()});
        
        String[] serviceDefaultPerm = toEncodedPerm(permAdminService.getDefaultPermissions());
        String[] mBeanDefaultPerm = mBean.listDefaultPermissions();
        assertNotNull(mBeanDefaultPerm);
        assertArrayEquals(serviceDefaultPerm, mBeanDefaultPerm);
    }

View Full Code Here

    }


    @Test
    public void testMBeanInterface() throws IOException {
        PermissionAdminMBean mBean = getMBean(PermissionAdminMBean.OBJECTNAME, PermissionAdminMBean.class);
        PermissionAdmin permAdminService = getService(PermissionAdmin.class);
        assertNotNull(permAdminService);


        String[] serviceLocation = permAdminService.getLocations();
        String[] mBeanLocations = mBean.listLocations();
        assertArrayEquals(serviceLocation, mBeanLocations);


        PermissionInfo defPerm = new PermissionInfo("AllPermission", "*", "*");
        permAdminService.setDefaultPermissions(new PermissionInfo[]{defPerm});
        PermissionInfo[] permissions = permAdminService.getDefaultPermissions();
        assertNotNull(permissions);


        String[] encoded = toEncodedPerm(permissions);
        String[] mBeanDefPermissions = mBean.listDefaultPermissions();
        assertArrayEquals(encoded, mBeanDefPermissions);
        
        Bundle a = context().getBundleByName("org.apache.aries.jmx.test.bundlea");
        assertNotNull(a);
        
        String location = a.getLocation();
        
        PermissionInfo bundleaPerm = new PermissionInfo("ServicePermission", "ServiceA", "GET");
        mBean.setPermissions(location, new String[]{bundleaPerm.getEncoded()});
        
        String[] serviceBundleaPerm = toEncodedPerm(permAdminService.getPermissions(location));
        String[] mBeanBundleaPerm = mBean.getPermissions(location);
        assertNotNull(mBeanBundleaPerm);
        assertArrayEquals(serviceBundleaPerm, mBeanBundleaPerm);
        
        PermissionInfo defaultPerm = new PermissionInfo("AllPermission", "*", "GET");
        mBean.setDefaultPermissions(new String[]{defaultPerm.getEncoded()});
        
        String[] serviceDefaultPerm = toEncodedPerm(permAdminService.getDefaultPermissions());
        String[] mBeanDefaultPerm = mBean.listDefaultPermissions();
        assertNotNull(mBeanDefaultPerm);
        assertArrayEquals(serviceDefaultPerm, mBeanDefaultPerm);
    }

View Full Code Here

    }
  }


  static void setCompositePermissions(String bundleLocation, BundleContext systemContext) {
    ServiceReference ref = systemContext.getServiceReference(PermissionAdmin.class.getName());
    PermissionAdmin permAdmin = (PermissionAdmin) (ref == null ? null : systemContext.getService(ref));
    if (permAdmin == null)
      throw new RuntimeException("No Permission Admin service is available"); //$NON-NLS-1$
    try {
      permAdmin.setPermissions(bundleLocation, COMPOSITE_PERMISSIONS);
    } finally {
      systemContext.ungetService(ref);
    }
  }

View Full Code Here

  private void foundPermissionAdmin(final ServiceReference reference)
  {
    registerMBean(PermissionAdminMBean.class.getName(), new Factory<PermissionAdminMBean>() {
      public PermissionAdminMBean create()
      {
        PermissionAdmin service = (PermissionAdmin) ctx.getService(reference);


        if (service == null) return null;
        else return new org.apache.aries.jmx.permissionadmin.PermissionAdmin(service);
      }
    }, PermissionAdminMBean.OBJECTNAME, _permissionAdminMbean);

View Full Code Here

    }
  }


  static void setCompositePermissions(String bundleLocation, BundleContext systemContext) {
    ServiceReference ref = systemContext.getServiceReference(PermissionAdmin.class.getName());
    PermissionAdmin permAdmin = (PermissionAdmin) (ref == null ? null : systemContext.getService(ref));
    if (permAdmin == null)
      throw new RuntimeException("No Permission Admin service is available"); //$NON-NLS-1$
    try {
      permAdmin.setPermissions(bundleLocation, COMPOSITE_PERMISSIONS);
    } finally {
      systemContext.ungetService(ref);
    }
  }

View Full Code Here

    public void bundleChanged(BundleEvent bundleEvent) {
        int event = bundleEvent.getType();
        if (event == BundleEvent.INSTALLED) {
            Bundle installedBundle = bundleEvent.getBundle();
            String bundleLocation = installedBundle.getLocation();
            PermissionAdmin permissionAdmin = getPermissionAdmin(context);
            if (permissionAdmin != null) {
                if (bundleLocation.startsWith("reference:file:plugins/")) {
                    PermissionInfo[] superTenantPermInfos = {
                            new PermissionInfo(AllPermission.class.getName(), "", ""),
                            //                            new PermissionInfo(PackagePermission.class.getName(), "*", PackagePermission.EXPORTONLY),
                            //                            new PermissionInfo(PackagePermission.class.getName(), "*", PackagePermission.IMPORT),
                            //                            new PermissionInfo(PropertyPermission.class.getName(), "user.home", "read"),
                            //                            new PermissionInfo(
                            //                                    FilePermission.class.getName(), file.getAbsolutePath(), "read"),
                            //                            new PermissionInfo(
                            //                                    ServicePermission.class.getName(), "org.eclipse.osgi.service.environment.EnvironmentInfo", ServicePermission.GET)


                    };
                    permissionAdmin.setPermissions(bundleLocation, superTenantPermInfos);
                } else {
                    // TODO: For non-super-tenant bundles. Should we deal with them at a different level (when installing cApps) 
                }
            }
        }

View Full Code Here

    }


    @Test
    public void testMBeanInterface() throws IOException {
        PermissionAdminMBean mBean = getMBean(PermissionAdminMBean.OBJECTNAME, PermissionAdminMBean.class);
        PermissionAdmin permAdminService = getService(PermissionAdmin.class);
        assertNotNull(permAdminService);


        String[] serviceLocation = permAdminService.getLocations();
        String[] mBeanLocations = mBean.listLocations();
        assertArrayEquals(serviceLocation, mBeanLocations);


        PermissionInfo defPerm = new PermissionInfo("AllPermission", "*", "*");
        permAdminService.setDefaultPermissions(new PermissionInfo[]{defPerm});
        PermissionInfo[] permissions = permAdminService.getDefaultPermissions();
        assertNotNull(permissions);


        String[] encoded = toEncodedPerm(permissions);
        String[] mBeanDefPermissions = mBean.listDefaultPermissions();
        assertArrayEquals(encoded, mBeanDefPermissions);
        
        Bundle a = getBundle("org.apache.aries.jmx.test.bundlea");
        assertNotNull(a);
        
        String location = a.getLocation();
        
        PermissionInfo bundleaPerm = new PermissionInfo("ServicePermission", "ServiceA", "GET");
        mBean.setPermissions(location, new String[]{bundleaPerm.getEncoded()});
        
        String[] serviceBundleaPerm = toEncodedPerm(permAdminService.getPermissions(location));
        String[] mBeanBundleaPerm = mBean.getPermissions(location);
        assertNotNull(mBeanBundleaPerm);
        assertArrayEquals(serviceBundleaPerm, mBeanBundleaPerm);
        
        PermissionInfo defaultPerm = new PermissionInfo("AllPermission", "*", "GET");
        mBean.setDefaultPermissions(new String[]{defaultPerm.getEncoded()});
        
        String[] serviceDefaultPerm = toEncodedPerm(permAdminService.getDefaultPermissions());
        String[] mBeanDefaultPerm = mBean.listDefaultPermissions();
        assertNotNull(mBeanDefaultPerm);
        assertArrayEquals(serviceDefaultPerm, mBeanDefaultPerm);
    }

View Full Code Here

  private void foundPermissionAdmin(final ServiceReference reference)
  {
    registerMBean(PermissionAdminMBean.class.getName(), new Factory<PermissionAdminMBean>() {
      public PermissionAdminMBean create()
      {
        PermissionAdmin service = (PermissionAdmin) ctx.getService(reference);
        
        if (service == null) return null;
        else return new org.apache.aries.jmx.permissionadmin.PermissionAdmin(service);
      }
    }, PermissionAdminMBean.OBJECTNAME, _permissionAdminMbean);

View Full Code Here

     * osgi.framework.ServiceReference)
     */
    public Object addingService(ServiceReference reference) {
      log.fine("Registering permission admin with MBeanServer: "
          + mbeanServer + " with name: " + name);
      PermissionAdmin admin = (PermissionAdmin) bundleContext
          .getService(reference);
      try {
        manager = new StandardMBean(new PermissionManager(admin),
            PermissionManagerMBean.class);
      } catch (NotCompliantMBeanException e1) {

View Full Code Here

0 1

TOP

Related Classes of org.osgi.service.permissionadmin.PermissionAdmin

org.apache.aries.jmx.core.whiteboard.Activator

org.apache.aries.jmx.permissionadmin.PermissionAdminMBeanTest

org.apache.felix.webconsole.internal.core.PermissionsConfigurationPrinter

org.eclipse.osgi.internal.composite.CompositeHelper

org.osgi.impl.bundle.jmx.Activator$PermissionAdminTracker

org.wso2.carbon.osgi.security.PermissionManager

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.