java.security

Class PolicySpi


  • public abstract class PolicySpi
extends Object
    This class defines the Service Provider Interface ( SPI) for the Policy class. All the abstract methods in this class must be implemented by each service provider who wishes to supply a Policy implementation.

    Subclass implementations of this abstract class must provide a public constructor that takes a Policy.Parameters object as an input parameter. This constructor also must throw an IllegalArgumentException if it does not understand the Policy.Parameters input.

    Since:
    1.6

    • Constructor Detail

      • PolicySpi

        public PolicySpi()

    • Method Detail

      • engineImplies

        protected abstract boolean engineImplies(ProtectionDomain domain,
                                         Permission permission)
        Check whether the policy has granted a Permission to a ProtectionDomain.
        Parameters:
        domain - the ProtectionDomain to check.
        permission - check whether this permission is granted to the specified domain.
        Returns:
        boolean true if the permission is granted to the domain.

      • engineRefresh

        protected void engineRefresh()
        Refreshes/reloads the policy configuration. The behavior of this method depends on the implementation. For example, calling refresh on a file-based policy will cause the file to be re-read.

        The default implementation of this method does nothing. This method should be overridden if a refresh operation is supported by the policy implementation.

      • engineGetPermissions

        protected PermissionCollection engineGetPermissions(CodeSource codesource)
        Return a PermissionCollection object containing the set of permissions granted to the specified CodeSource.

        The default implementation of this method returns Policy.UNSUPPORTED_EMPTY_COLLECTION object. This method can be overridden if the policy implementation can return a set of permissions granted to a CodeSource.

        Parameters:
        codesource - the CodeSource to which the returned PermissionCollection has been granted.
        Returns:
        a set of permissions granted to the specified CodeSource. If this operation is supported, the returned set of permissions must be a new mutable instance and it must support heterogeneous Permission types. If this operation is not supported, Policy.UNSUPPORTED_EMPTY_COLLECTION is returned.

      • engineGetPermissions

        protected PermissionCollection engineGetPermissions(ProtectionDomain domain)
        Return a PermissionCollection object containing the set of permissions granted to the specified ProtectionDomain.

        The default implementation of this method returns Policy.UNSUPPORTED_EMPTY_COLLECTION object. This method can be overridden if the policy implementation can return a set of permissions granted to a ProtectionDomain.

        Parameters:
        domain - the ProtectionDomain to which the returned PermissionCollection has been granted.
        Returns:
        a set of permissions granted to the specified ProtectionDomain. If this operation is supported, the returned set of permissions must be a new mutable instance and it must support heterogeneous Permission types. If this operation is not supported, Policy.UNSUPPORTED_EMPTY_COLLECTION is returned.