Package org.apache.webbeans.corespi.security

Class ManagedSecurityService

java.lang.Object

org.apache.webbeans.corespi.security.ManagedSecurityService

All Implemented Interfaces:

org.apache.webbeans.spi.SecurityService

public class ManagedSecurityService
extends Object
implements org.apache.webbeans.spi.SecurityService

This version of the SecurityService uses the java.lang.SecurityManager to check low level access to the underlying functions via doPriviliged blocks. The most secure way is to just copy the source over to your own class and configure it in openwebbeans.properties. This way you can add whatever security features you like to use.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
protected static class	ManagedSecurityService.PrivilegedActionForClass
protected static class	ManagedSecurityService.PrivilegedActionForIsAccessible
protected static class	ManagedSecurityService.PrivilegedActionForObjectCreation
protected static class	ManagedSecurityService.PrivilegedActionForProperty
protected static class	ManagedSecurityService.PrivilegedActionForSetAccessible
protected static class	ManagedSecurityService.PrivilegedActionForSetProperty
protected static class	ManagedSecurityService.PrivilegedActionGetSystemProperties

Constructor Summary

Constructors

Constructor	Description
ManagedSecurityService()

Method Summary

Modifier and Type	Method	Description
<T> Constructor<T>	doPrivilegedGetConstructor(Class<T> clazz, Class<?>... parameterTypes)
<T> Constructor<T>	doPrivilegedGetDeclaredConstructor(Class<T> clazz, Class<?>... parameterTypes)
<T> Constructor<?>[]	doPrivilegedGetDeclaredConstructors(Class<T> clazz)
<T> Field	doPrivilegedGetDeclaredField(Class<T> clazz, String name)
<T> Field[]	doPrivilegedGetDeclaredFields(Class<T> clazz)
<T> Method	doPrivilegedGetDeclaredMethod(Class<T> clazz, String name, Class<?>... parameterTypes)
<T> Method[]	doPrivilegedGetDeclaredMethods(Class<T> clazz)
Properties	doPrivilegedGetSystemProperties()
String	doPrivilegedGetSystemProperty(String propertyName, String defaultValue)
boolean	doPrivilegedIsAccessible(AccessibleObject obj)
<T> T	doPrivilegedObjectCreate(Class<T> clazz)
void	doPrivilegedSetAccessible(AccessibleObject obj, boolean flag)
void	doPrivilegedSetSystemProperty(String propertyName, String value)
Principal	getCurrentPrincipal()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ManagedSecurityService

public ManagedSecurityService()

Method Detail

getCurrentPrincipal

public Principal getCurrentPrincipal()

Specified by:

getCurrentPrincipal in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredConstructor

public <T> Constructor<T> doPrivilegedGetDeclaredConstructor(Class<T> clazz,
                                                             Class<?>... parameterTypes)

Specified by:

doPrivilegedGetDeclaredConstructor in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetConstructor

public <T> Constructor<T> doPrivilegedGetConstructor(Class<T> clazz,
                                                     Class<?>... parameterTypes)

Specified by:

doPrivilegedGetConstructor in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredConstructors

public <T> Constructor<?>[] doPrivilegedGetDeclaredConstructors(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredConstructors in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredMethod

public <T> Method doPrivilegedGetDeclaredMethod(Class<T> clazz,
                                                String name,
                                                Class<?>... parameterTypes)

Specified by:

doPrivilegedGetDeclaredMethod in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredMethods

public <T> Method[] doPrivilegedGetDeclaredMethods(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredMethods in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredField

public <T> Field doPrivilegedGetDeclaredField(Class<T> clazz,
                                              String name)

Specified by:

doPrivilegedGetDeclaredField in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetDeclaredFields

public <T> Field[] doPrivilegedGetDeclaredFields(Class<T> clazz)

Specified by:

doPrivilegedGetDeclaredFields in interface org.apache.webbeans.spi.SecurityService

doPrivilegedSetAccessible

public void doPrivilegedSetAccessible(AccessibleObject obj,
                                      boolean flag)

Specified by:

doPrivilegedSetAccessible in interface org.apache.webbeans.spi.SecurityService

doPrivilegedIsAccessible

public boolean doPrivilegedIsAccessible(AccessibleObject obj)

Specified by:

doPrivilegedIsAccessible in interface org.apache.webbeans.spi.SecurityService

doPrivilegedObjectCreate

public <T> T doPrivilegedObjectCreate(Class<T> clazz)
                               throws PrivilegedActionException,
                                      IllegalAccessException,
                                      InstantiationException

Specified by:

doPrivilegedObjectCreate in interface org.apache.webbeans.spi.SecurityService

Throws:

PrivilegedActionException

IllegalAccessException

InstantiationException

doPrivilegedSetSystemProperty

public void doPrivilegedSetSystemProperty(String propertyName,
                                          String value)

Specified by:

doPrivilegedSetSystemProperty in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetSystemProperty

public String doPrivilegedGetSystemProperty(String propertyName,
                                            String defaultValue)

Specified by:

doPrivilegedGetSystemProperty in interface org.apache.webbeans.spi.SecurityService

doPrivilegedGetSystemProperties

public Properties doPrivilegedGetSystemProperties()

Specified by:

doPrivilegedGetSystemProperties in interface org.apache.webbeans.spi.SecurityService