org.jboss.as.server.security

Class ServerPermission

java.lang.Object

java.security.Permission

java.security.BasicPermission

org.jboss.as.server.security.ServerPermission

All Implemented Interfaces:

Serializable, Guard

public class ServerPermission
extends BasicPermission

This class is for WildFly Server's permissions. A permission contains a name (also referred to as a "target name") but no actions list; you either have the named permission or you don't.

The target name is the name of the permission. The following table lists all the possible permission target names, and for each provides a description of what the permission allows.

Permission Target Name	What the Permission Allows
createDeploymentReflectionIndex	Create a DeploymentReflectionIndex
getCurrentServiceContainer	Retrieve current ServiceContainer
setCurrentServiceContainer	Set current ServiceContainer
useServiceRegistry	Use SecuredServiceRegistry, i.e. invoke its methods

The permission name may also be an asterisk, to signify a wildcard match.

Author:

Eduardo Martins

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
static ServerPermission	CREATE_DEPLOYMENT_REFLECTION_INDEX The Server Permission named canAccessImmutableManagementResourceRegistration, which should be used to create a DeploymentReflectionIndex.
static String	CREATE_DEPLOYMENT_REFLECTION_INDEX_NAME
static ServerPermission	GET_CURRENT_SERVICE_CONTAINER The Server Permission named canAccessModelController, which should be used to retrieve current ServiceContainer.
static String	GET_CURRENT_SERVICE_CONTAINER_NAME
static ServerPermission	SET_CURRENT_SERVICE_CONTAINER The Server Permission named createCaller, which should be used to set current ServiceContainer.
static String	SET_CURRENT_SERVICE_CONTAINER_NAME
static ServerPermission	USE_SERVICE_REGISTRY The Server Permission named getCallerSubject, which should be used to use SecuredServiceRegistry, i.e.
static String	USE_SERVICE_REGISTRY_NAME

Constructor Summary

Constructors

Constructor and Description
ServerPermission(String name) Creates a new permission with the specified name.
ServerPermission(String name, String actions) Creates a new permission object with the specified name.

Method Summary

Methods inherited from class java.security.BasicPermission

equals, getActions, hashCode, implies, newPermissionCollection

Methods inherited from class java.security.Permission

checkGuard, getName, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Detail

CREATE_DEPLOYMENT_REFLECTION_INDEX_NAME

public static final String CREATE_DEPLOYMENT_REFLECTION_INDEX_NAME

See Also:

Constant Field Values

GET_CURRENT_SERVICE_CONTAINER_NAME

public static final String GET_CURRENT_SERVICE_CONTAINER_NAME

See Also:

Constant Field Values

SET_CURRENT_SERVICE_CONTAINER_NAME

public static final String SET_CURRENT_SERVICE_CONTAINER_NAME

See Also:

Constant Field Values

USE_SERVICE_REGISTRY_NAME

public static final String USE_SERVICE_REGISTRY_NAME

See Also:

Constant Field Values

CREATE_DEPLOYMENT_REFLECTION_INDEX

public static final ServerPermission CREATE_DEPLOYMENT_REFLECTION_INDEX

The Server Permission named canAccessImmutableManagementResourceRegistration, which should be used to create a DeploymentReflectionIndex.

GET_CURRENT_SERVICE_CONTAINER

public static final ServerPermission GET_CURRENT_SERVICE_CONTAINER

The Server Permission named canAccessModelController, which should be used to retrieve current ServiceContainer.

SET_CURRENT_SERVICE_CONTAINER

public static final ServerPermission SET_CURRENT_SERVICE_CONTAINER

The Server Permission named createCaller, which should be used to set current ServiceContainer.

USE_SERVICE_REGISTRY

public static final ServerPermission USE_SERVICE_REGISTRY

The Server Permission named getCallerSubject, which should be used to use SecuredServiceRegistry, i.e. invoke its methods.

Constructor Detail

ServerPermission

public ServerPermission(String name)

Creates a new permission with the specified name. The name is the symbolic name of the permission, such as "getCurrentServiceContainer".

Parameters:

name - the name of the permission.

Throws:

NullPointerException - if name is null.

IllegalArgumentException - if name is not valid.

ServerPermission

public ServerPermission(String name,
                        String actions)

Creates a new permission object with the specified name. The name is the symbolic name of the permission, and the actions String is currently unused and should be null.

Parameters:

name - the name of the permission.

actions - should be null.

Throws:

NullPointerException - if name is null.

IllegalArgumentException - if name and/or actions are not valid.