com.sun.identity.security

Class ISSecurityPermission

java.lang.Object

java.security.Permission

com.sun.identity.security.ISSecurityPermission

All Implemented Interfaces:

Serializable, Guard

public class ISSecurityPermission
extends Permission

This class ISSecurityPermission is used to protect the Access Manager resources which should be accessed only by trusted application. The resources this Permission is used to protect are: OpenAM administrator DN and password, and access to the encryption and decryption methods used to encrypt all passwords in OpenAM services. The supported permissions is "access" and supported actions are "adminpassword" and "crypt". So in the Java security policy file which will define the security options to grant this permission to code bases, it should be done as below:

 grant codeBase "file:{directory where jars are located}/-" {
 com.sun.identity.security.ISSecurityPermission "access",
 "adminpassword,crypt"; };

Note: The property com.sun.identity.security.checkcaller should be set to true in AMConfig.properties file to enable the Java security permissions check.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
ISSecurityPermission(String access) Constructs ISSecurityPermission object.
ISSecurityPermission(String access, String action) Constructs ISSecurityPermission object.

Method Summary

Modifier and Type	Method and Description
boolean	equals(Object o) Returns true if this object is equals to o.
String	getActions()
int	hashCode() Returns hash code for this object.
boolean	implies(Permission p) This method checks to see if this instance of ISSecurityPermission implies the Permission being passed as the argument.

Methods inherited from class java.security.Permission

checkGuard, getName, newPermissionCollection, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

ISSecurityPermission

public ISSecurityPermission(String access,
                            String action)

Constructs ISSecurityPermission object.

Parameters:

access - Has to be string "access"

action - Can be adminpassword or crypt.

ISSecurityPermission

public ISSecurityPermission(String access)

Constructs ISSecurityPermission object. This constructor sets the action to "adminpassword" by default.

Parameters:

access - Has to be string "access"

Method Detail

implies

public boolean implies(Permission p)

This method checks to see if this instance of ISSecurityPermission implies the Permission being passed as the argument. For more information on this, see the Javadocs of java.security.Permission

Specified by:

implies in class Permission

Parameters:

p - Instance of com.sun.identity.security.ISSecurityPermission

Returns:

true if this instance of ISSecurityPermission implies the actions of the argument p. False otherwise java.security.Permission

hashCode

public int hashCode()

Returns hash code for this object.

Specified by:

hashCode in class Permission

Returns:

hash code representing this object

See Also:

Permission.hashCode()

equals

public boolean equals(Object o)

Returns true if this object is equals to o.

Specified by:

equals in class Permission

Parameters:

o - object fro comparison.

Returns:

true if both object are similar.

getActions

public String getActions()

Specified by:

getActions in class Permission

Returns:

String representation of actions supported by ISSecurityPermission

See Also:

Permission.getActions()