org.systinet.security.policy
Class JAASAccessController

java.lang.Object
  org.systinet.security.policy.WASPAccessController
      org.systinet.security.policy.JAASAccessController

public final class JAASAccessController

extends WASPAccessController

JAAS access controller uses standard JAAS authorization to check if the caller has sufficient priviledges. The policy decision is made using current JAAS policy and given subject.

Since:

4.0

Component:

Security-Specific

Field Summary

Fields inherited from class org.systinet.security.policy.WASPAccessController

WASP_AC_IMPL, WASP_POLICY_INSTANCE

Constructor Summary

JAASAccessController(java.util.Map properties)
Instantiates a JAASAccessController (empty contructor).

Method Summary

void	checkPermission(javax.security.auth.Subject subject, java.security.Permission perm) Determines whether the access request indicated by the specified permission should be allowed or denied, based on the security policy currently in effect.

Methods inherited from class org.systinet.security.policy.WASPAccessController

checkPermission, getInstance, initSingleton, setSingleton

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JAASAccessController

public JAASAccessController(java.util.Map properties)

Instantiates a JAASAccessController (empty contructor).

Parameters:

properties - can be null

Method Detail

checkPermission

public void checkPermission(javax.security.auth.Subject subject,
                            java.security.Permission perm)
                     throws java.security.AccessControlException

Determines whether the access request indicated by the specified permission should be allowed or denied, based on the security policy currently in effect. This method quietly returns if the access request is permitted, or throws a suitable AccessControlException otherwise.

Specified by:

checkPermission in class WASPAccessController

Parameters:

subject - permission is checked for this subject (can be null); if it is null permission check is made using current Java access control context.

perm - the requested permission (should not be null)

Throws:

java.security.AccessControlException - if the specified permission is not permitted, based on the current security policy.