org.jppf.jmxremote

Interface JMXAuthorizationChecker

All Known Implementing Classes:

JMXAuthorizationCheckerAdapter, JMXAuthorizationDeniedAdapter

public interface JMXAuthorizationChecker

This interface represents a set of authorization checks for a given authenticated subject.

A check is available for each method available in the MBeanServerConnection interface and is implemented as a method whose name is made of the "check" prefix, followed by the name of the method to check.

An authorization failure is raised by throwing an exception in a checkXXX() method.

Method Summary

Methods

Modifier and Type	Method and Description
void	checkAddNotificationListener(javax.management.ObjectName name, javax.management.NotificationListener listener, javax.management.NotificationFilter filter, java.lang.Object handback) Check that the subject can invoke the MBeanServerConnection.addNotificationListener(ObjectName, NotificationListener, NotificationFilter, Object) method on the mbean server.
void	checkAddNotificationListener(javax.management.ObjectName name, javax.management.ObjectName listener, javax.management.NotificationFilter filter, java.lang.Object handback) Check that the subject can invoke the MBeanServerConnection.addNotificationListener(ObjectName, ObjectName, NotificationFilter, Object) method on the mbean server.
void	checkCreateMBean(java.lang.String className, javax.management.ObjectName name) Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName) method on the mbean server.
void	checkCreateMBean(java.lang.String className, javax.management.ObjectName name, java.lang.Object[] params, java.lang.String[] signature) Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, Object[], String[]) method on the mbean server.
void	checkCreateMBean(java.lang.String className, javax.management.ObjectName name, javax.management.ObjectName loaderName) Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, ObjectName) method on the mbean server.
void	checkCreateMBean(java.lang.String className, javax.management.ObjectName name, javax.management.ObjectName loaderName, java.lang.Object[] params, java.lang.String[] signature) Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, ObjectName, Object[], String[]) method on the mbean server.
void	checkGetAttribute(javax.management.ObjectName name, java.lang.String attribute) Check that the subject can invoke the MBeanServerConnection.getAttribute(ObjectName, String) method on the mbean server.
void	checkGetAttributes(javax.management.ObjectName name, java.lang.String[] attributes) Check that the subject can invoke the MBeanServerConnection.getAttributes(ObjectName, String[]) method on the mbean server.
void	checkGetDefaultDomain() Check that the subject can invoke the MBeanServerConnection.getDefaultDomain() method on the mbean server.
void	checkGetDomains() Check that the subject can invoke the MBeanServerConnection.getDomains() method on the mbean server.
void	checkGetMBeanCount() Check that the subject can invoke the MBeanServerConnection.getMBeanCount() method on the mbean server.
void	checkGetMBeanInfo(javax.management.ObjectName name) Check that the subject can invoke the MBeanServerConnection.getMBeanInfo(ObjectName) method on the mbean server.
void	checkGetObjectInstance(javax.management.ObjectName name) Check that the subject can invoke the MBeanServerConnection.getObjectInstance(ObjectName) method on the mbean server.
void	checkInvoke(javax.management.ObjectName name, java.lang.String operationName, java.lang.Object[] params, java.lang.String[] signature) Check that the subject can invoke the MBeanServerConnection.invoke(ObjectName, String, Object[], String[]) method on the mbean server.
void	checkIsInstanceOf(javax.management.ObjectName name, java.lang.String className) Check that the subject can invoke the MBeanServerConnection.isInstanceOf(ObjectName, String) method on the mbean server.
void	checkIsRegistered(javax.management.ObjectName name) Check that the subject can invoke the MBeanServerConnection.isRegistered(ObjectName) method on the mbean server.
void	checkQueryMBeans(javax.management.ObjectName name, javax.management.QueryExp query) Check that the subject can invoke the MBeanServerConnection.queryMBeans(ObjectName, QueryExp) method on the mbean server.
void	checkQueryNames(javax.management.ObjectName name, javax.management.QueryExp query) Check that the subject can invoke the MBeanServerConnection.queryNames(ObjectName, QueryExp) method on the mbean server.
void	checkRemoveNotificationListener(javax.management.ObjectName name, javax.management.NotificationListener listener) Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, NotificationListener) method on the mbean server.
void	checkRemoveNotificationListener(javax.management.ObjectName name, javax.management.NotificationListener listener, javax.management.NotificationFilter filter, java.lang.Object handback) Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, NotificationListener, NotificationFilter, Object) method on the mbean server.
void	checkRemoveNotificationListener(javax.management.ObjectName name, javax.management.ObjectName listener) Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, ObjectName) method on the mbean server.
void	checkRemoveNotificationListener(javax.management.ObjectName name, javax.management.ObjectName listener, javax.management.NotificationFilter filter, java.lang.Object handback) Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, ObjectName, NotificationFilter, Object) method on the mbean server.
void	checkSetAttribute(javax.management.ObjectName name, javax.management.Attribute attribute) Check that the subject can invoke the MBeanServerConnection.setAttribute(ObjectName, Attribute) method on the mbean server.
void	checkSetAttributes(javax.management.ObjectName name, javax.management.AttributeList attributes) Check that the subject can invoke the MBeanServerConnection.setAttributes(ObjectName, AttributeList) method on the mbean server.
void	checkUnregisterMBean(javax.management.ObjectName name) Check that the subject can invoke the MBeanServerConnection.unregisterMBean(ObjectName) method on the mbean server.
javax.security.auth.Subject	getSubject() Get the authenticated subject to check for authorization.
void	setSubject(javax.security.auth.Subject subject) Set the authenticated subject to check for authorization.

Method Detail

getSubject

javax.security.auth.Subject getSubject()

Get the authenticated subject to check for authorization.

Returns:

the authenticated Subject, if any.

setSubject

void setSubject(javax.security.auth.Subject subject)

Set the authenticated subject to check for authorization.

Parameters:

subject - the authenticated Subject to set.

checkCreateMBean

void checkCreateMBean(java.lang.String className,
                    javax.management.ObjectName name)
                      throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName) method on the mbean server.

Parameters:

className - the class name of the MBean to instantiate.

name - the object name of the MBean. May be null.

Throws:

java.lang.Exception - if the subject is not authorized.

checkCreateMBean

void checkCreateMBean(java.lang.String className,
                    javax.management.ObjectName name,
                    javax.management.ObjectName loaderName)
                      throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, ObjectName) method on the mbean server.

Parameters:

className - the class name of the MBean to be instantiated.

name - the object name of the MBean. May be null.

loaderName - the object name of the class loader to be used.

Throws:

java.lang.Exception - if the subject is not authorized.

checkCreateMBean

void checkCreateMBean(java.lang.String className,
                    javax.management.ObjectName name,
                    java.lang.Object[] params,
                    java.lang.String[] signature)
                      throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, Object[], String[]) method on the mbean server.

Parameters:

className - the class name of the MBean to instantiate.

name - the object name of the MBean. May be null.

params - an array containing the parameters of the constructor to invoke.

signature - an array containing the signature of the constructor to invoke.

Throws:

java.lang.Exception - if the subject is not authorized.

checkCreateMBean

void checkCreateMBean(java.lang.String className,
                    javax.management.ObjectName name,
                    javax.management.ObjectName loaderName,
                    java.lang.Object[] params,
                    java.lang.String[] signature)
                      throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.createMBean(String, ObjectName, ObjectName, Object[], String[]) method on the mbean server.

Parameters:

className - The class name of the MBean to instantiate.

name - the object name of the MBean. May be null.

loaderName - the object name of the class loader to use.

params - an array containing the parameters of the constructor to invoke.

signature - an array containing the signature of the constructor to invoke.

Throws:

java.lang.Exception - if the subject is not authorized.

checkUnregisterMBean

void checkUnregisterMBean(javax.management.ObjectName name)
                          throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.unregisterMBean(ObjectName) method on the mbean server.

Parameters:

name - the object name of the MBean to unregister.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetObjectInstance

void checkGetObjectInstance(javax.management.ObjectName name)
                            throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getObjectInstance(ObjectName) method on the mbean server.

Parameters:

name - the object name of the MBean.

Throws:

java.lang.Exception - if the subject is not authorized.

checkQueryMBeans

void checkQueryMBeans(javax.management.ObjectName name,
                    javax.management.QueryExp query)
                      throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.queryMBeans(ObjectName, QueryExp) method on the mbean server.

Parameters:

name - the object name pattern identifying the MBeans to retrieve.

query - the query expression to apply for selecting MBeans.

Throws:

java.lang.Exception - if the subject is not authorized.

checkQueryNames

void checkQueryNames(javax.management.ObjectName name,
                   javax.management.QueryExp query)
                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.queryNames(ObjectName, QueryExp) method on the mbean server.

Parameters:

name - the object name pattern identifying the MBean names to retrieve.

query - the query expression to apply for selecting MBeans.

Throws:

java.lang.Exception - if the subject is not authorized.

checkIsRegistered

void checkIsRegistered(javax.management.ObjectName name)
                       throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.isRegistered(ObjectName) method on the mbean server.

Parameters:

name - the object name of the MBean to check.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetMBeanCount

void checkGetMBeanCount()
                        throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getMBeanCount() method on the mbean server.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetAttribute

void checkGetAttribute(javax.management.ObjectName name,
                     java.lang.String attribute)
                       throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getAttribute(ObjectName, String) method on the mbean server.

Parameters:

name - the object name of the MBean from which the attribute is to be retrieved.

attribute - A String specifying the name of the attribute to retrieve.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetAttributes

void checkGetAttributes(javax.management.ObjectName name,
                      java.lang.String[] attributes)
                        throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getAttributes(ObjectName, String[]) method on the mbean server.

Parameters:

name - the object name of the MBean from which the attributes are retrieved.

attributes - a list of the attributes to retrieve.

Throws:

java.lang.Exception - if the subject is not authorized.

checkSetAttribute

void checkSetAttribute(javax.management.ObjectName name,
                     javax.management.Attribute attribute)
                       throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.setAttribute(ObjectName, Attribute) method on the mbean server.

Parameters:

name - the name of the MBean within which the attribute is to be set.

attribute - The identification of the attribute to set and the value to set it to.

Throws:

java.lang.Exception - if the subject is not authorized.

checkSetAttributes

void checkSetAttributes(javax.management.ObjectName name,
                      javax.management.AttributeList attributes)
                        throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.setAttributes(ObjectName, AttributeList) method on the mbean server.

Parameters:

name - The object name of the MBean within which the attributes are to be set.

attributes - A list of attributes: the identification of the attributes to set and the values to set them to.

Throws:

java.lang.Exception - if the subject is not authorized.

checkInvoke

void checkInvoke(javax.management.ObjectName name,
               java.lang.String operationName,
               java.lang.Object[] params,
               java.lang.String[] signature)
                 throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.invoke(ObjectName, String, Object[], String[]) method on the mbean server.

Parameters:

name - the object name of the MBean on which the method is invoked.

operationName - the name of the operation to invoke.

params - an array containing the parameters to set when the operation is invoked.

signature - an array containing the signature of the operation, an array of class names in the format returned by Class.getName().

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetDefaultDomain

void checkGetDefaultDomain()
                           throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getDefaultDomain() method on the mbean server.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetDomains

void checkGetDomains()
                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getDomains() method on the mbean server.

Throws:

java.lang.Exception - if the subject is not authorized.

checkAddNotificationListener

void checkAddNotificationListener(javax.management.ObjectName name,
                                javax.management.NotificationListener listener,
                                javax.management.NotificationFilter filter,
                                java.lang.Object handback)
                                  throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.addNotificationListener(ObjectName, NotificationListener, NotificationFilter, Object) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be added.

listener - the listener object which will handle the notifications emitted by the registered MBean.

filter - the filter object.

handback - the context to send to the listener when a notification is emitted.

Throws:

java.lang.Exception - if the subject is not authorized.

checkAddNotificationListener

void checkAddNotificationListener(javax.management.ObjectName name,
                                javax.management.ObjectName listener,
                                javax.management.NotificationFilter filter,
                                java.lang.Object handback)
                                  throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.addNotificationListener(ObjectName, ObjectName, NotificationFilter, Object) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be added.

listener - the object name of the listener object which will handle the notifications emitted by the registered MBean.

filter - the filter object.

handback - the context to send to the listener when a notification is emitted.

Throws:

java.lang.Exception - if the subject is not authorized.

checkRemoveNotificationListener

void checkRemoveNotificationListener(javax.management.ObjectName name,
                                   javax.management.ObjectName listener)
                                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, ObjectName) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be added.

listener - the object name of the listener object which will handle the notifications emitted by the registered MBean.

Throws:

java.lang.Exception - if the subject is not authorized.

checkRemoveNotificationListener

void checkRemoveNotificationListener(javax.management.ObjectName name,
                                   javax.management.ObjectName listener,
                                   javax.management.NotificationFilter filter,
                                   java.lang.Object handback)
                                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, ObjectName, NotificationFilter, Object) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be removed.

listener - the object name of the listener to remove.

filter - the filter that was specified when the listener was added.

handback - the handback that was specified when the listener was added.

Throws:

java.lang.Exception - if the subject is not authorized.

checkRemoveNotificationListener

void checkRemoveNotificationListener(javax.management.ObjectName name,
                                   javax.management.NotificationListener listener)
                                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, NotificationListener) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be removed.

listener - the listener object to remove.

Throws:

java.lang.Exception - if the subject is not authorized.

checkRemoveNotificationListener

void checkRemoveNotificationListener(javax.management.ObjectName name,
                                   javax.management.NotificationListener listener,
                                   javax.management.NotificationFilter filter,
                                   java.lang.Object handback)
                                     throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.removeNotificationListener(ObjectName, NotificationListener, NotificationFilter, Object) method on the mbean server.

Parameters:

name - the name of the MBean on which the listener should be removed.

listener - the listener object to remove.

filter - the filter that was specified when the listener was added.

handback - the handback that was specified when the listener was added.

Throws:

java.lang.Exception - if the subject is not authorized.

checkGetMBeanInfo

void checkGetMBeanInfo(javax.management.ObjectName name)
                       throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.getMBeanInfo(ObjectName) method on the mbean server.

Parameters:

name - the name of the MBean to analyze

Throws:

java.lang.Exception - if the subject is not authorized.

checkIsInstanceOf

void checkIsInstanceOf(javax.management.ObjectName name,
                     java.lang.String className)
                       throws java.lang.Exception

Check that the subject can invoke the MBeanServerConnection.isInstanceOf(ObjectName, String) method on the mbean server.

Parameters:

name - the object name of the MBean.

className - the name of the class.

Throws:

java.lang.Exception - if the subject is not authorized.