Package org.jboss.as.server.security

Class ServerPermission

java.lang.Object
java.security.Permission
java.security.BasicPermission
org.jboss.as.server.security.ServerPermission
All Implemented Interfaces:
Serializable, Guard
public class ServerPermission extends BasicPermission

This class is for WildFly Server's permissions. A permission contains a name (also referred to as a "target name") but no actions list; you either have the named permission or you don't.

The target name is the name of the permission. The following table lists all the possible permission target names, and for each provides a description of what the permission allows.

Permission Target Name What the Permission Allows
createDeploymentReflectionIndex Create a DeploymentReflectionIndex
getCurrentServiceContainer Retrieve current ServiceContainer
setCurrentServiceContainer Set current ServiceContainer
useServiceRegistry Use SecuredServiceRegistry, i.e. invoke its methods

The permission name may also be an asterisk, to signify a wildcard match.

Author:
Eduardo Martins
See Also:

  • Field Details

    • CREATE_DEPLOYMENT_REFLECTION_INDEX_NAME

      public static final String CREATE_DEPLOYMENT_REFLECTION_INDEX_NAME
      See Also:

    • GET_CURRENT_SERVICE_CONTAINER_NAME

      public static final String GET_CURRENT_SERVICE_CONTAINER_NAME
      See Also:

    • SET_CURRENT_SERVICE_CONTAINER_NAME

      public static final String SET_CURRENT_SERVICE_CONTAINER_NAME
      See Also:

    • USE_SERVICE_REGISTRY_NAME

      public static final String USE_SERVICE_REGISTRY_NAME
      See Also:

    • CREATE_DEPLOYMENT_REFLECTION_INDEX

      public static final ServerPermission CREATE_DEPLOYMENT_REFLECTION_INDEX
      The Server Permission named canAccessImmutableManagementResourceRegistration, which should be used to create a DeploymentReflectionIndex.

    • GET_CURRENT_SERVICE_CONTAINER

      public static final ServerPermission GET_CURRENT_SERVICE_CONTAINER
      The Server Permission named canAccessModelController, which should be used to retrieve current ServiceContainer.

    • SET_CURRENT_SERVICE_CONTAINER

      public static final ServerPermission SET_CURRENT_SERVICE_CONTAINER
      The Server Permission named createCaller, which should be used to set current ServiceContainer.

    • USE_SERVICE_REGISTRY

      public static final ServerPermission USE_SERVICE_REGISTRY
      The Server Permission named getCallerSubject, which should be used to use SecuredServiceRegistry, i.e. invoke its methods.

  • Constructor Details

    • ServerPermission

      public ServerPermission(String name)
      Creates a new permission with the specified name. The name is the symbolic name of the permission, such as "getCurrentServiceContainer".
      Parameters:
      name - the name of the permission.
      Throws:
      NullPointerException - if name is null.
      IllegalArgumentException - if name is not valid.

    • ServerPermission

      public ServerPermission(String name, String actions)
      Creates a new permission object with the specified name. The name is the symbolic name of the permission, and the actions String is currently unused and should be null.
      Parameters:
      name - the name of the permission.
      actions - should be null.
      Throws:
      NullPointerException - if name is null.
      IllegalArgumentException - if name and/or actions are not valid.