public final class AuthPermission extends BasicPermission
AuthPermission
contains a name (also referred to as a "target name") but no actions
list; you either have the named permission or you don't.
The target name is the name of a security configuration parameter
(see below). Currently the AuthPermission
object is used to
guard access to the Policy
, Subject
,
LoginContext
, and
Configuration
objects.
The standard target names for an Authentication Permission are:
doAs - allow the caller to invoke theSubject.doAs
methods. doAsPrivileged - allow the caller to invoke theSubject.doAsPrivileged
methods. getSubject - allow for the retrieval of the Subject(s) associated with the current Thread. getSubjectFromDomainCombiner - allow for the retrieval of the Subject associated with the aSubjectDomainCombiner
. setReadOnly - allow the caller to set a Subject to be read-only. modifyPrincipals - allow the caller to modify theSet
of Principals associated with aSubject
modifyPublicCredentials - allow the caller to modify theSet
of public credentials associated with aSubject
modifyPrivateCredentials - allow the caller to modify theSet
of private credentials associated with aSubject
refreshCredential - allow code to invoke therefresh
method on a credential which implements theRefreshable
interface. destroyCredential - allow code to invoke thedestroy
method on a credentialobject
which implements theDestroyable
interface. createLoginContext.{name} - allow code to instantiate aLoginContext
with the specifiedname
.name
is used as the index into the installed loginConfiguration
(that returned byConfiguration.getConfiguration()
). name can be wildcarded (set to '*') to allow for any name. getLoginConfiguration - allow for the retrieval of the system-wide login Configuration. createLoginConfiguration.{type} - allow code to obtain a Configuration object viaConfiguration.getInstance
. setLoginConfiguration - allow for the setting of the system-wide login Configuration. refreshLoginConfiguration - allow for the refreshing of the system-wide login Configuration.
The following target name has been deprecated in favor of
createLoginContext.{name}
.
createLoginContext - allow code to instantiate a
LoginContext
.
javax.security.auth.Policy
has been
deprecated in favor of java.security.Policy
.
Therefore, the following target names have also been deprecated:
getPolicy - allow the caller to retrieve the system-wide Subject-based access control policy. setPolicy - allow the caller to set the system-wide Subject-based access control policy. refreshPolicy - allow the caller to refresh the system-wide Subject-based access control policy.
Constructor and Description |
---|
AuthPermission(String name)
Creates a new AuthPermission with the specified name.
|
AuthPermission(String name,
String actions)
Creates a new AuthPermission object with the specified name.
|
equals, getActions, hashCode, implies, newPermissionCollection
checkGuard, getName, toString
public AuthPermission(String name)
name
- the name of the AuthPermissionNullPointerException
- if name
is null
.IllegalArgumentException
- if name
is empty.public AuthPermission(String name, String actions)
name
- the name of the AuthPermissionactions
- should be null.NullPointerException
- if name
is null
.IllegalArgumentException
- if name
is empty. Submit a bug or feature
For further API reference and developer documentation, see Java SE Documentation. That documentation contains more detailed, developer-targeted descriptions, with conceptual overviews, definitions of terms, workarounds, and working code examples.
Copyright © 1993, 2015, Oracle and/or its affiliates. All rights reserved.
DRAFT internal-b87