public class DefaultGroupPolicy extends Object implements GroupPolicy
ExecPermission
and
set of ExecOptionPermission
have been granted to the client
subject or the empty protection domain (a domain with all
null
elements) if there is no client subject.Constructor and Description |
---|
DefaultGroupPolicy() |
Modifier and Type | Method and Description |
---|---|
void |
checkGroup(ActivationGroupDesc desc)
Checks permissions for the specified group descriptor.
|
protected void |
checkPermission(Permission p)
Calls
BasicInvocationDispatcher.checkClientPermission with the
specified permission. |
public void checkGroup(ActivationGroupDesc desc)
null
and is not
ActivationGroupImpl
, or if the class location or the
initialization data in the descriptor is not null
, an
AccessControlException
is thrown. For each property in
the descriptor's property overrides, checkPermission
is called with an ExecOptionPermission
constructed with a target of the form "-Dname=value",
where name is the name of the property and value is the
value of the property. If the command environment in the descriptor is
not null
, then additional checks are made as follows. If
the command path is not null
, checkPermission
is called with an ExecPermission
constructed with the path as
a target. For each command option, checkPermission
is
called with an ExecOptionPermission
constructed with the
option as a target.checkGroup
in interface GroupPolicy
desc
- the activation group descriptorAccessControlException
- if permission is not granted to create
the specified groupprotected void checkPermission(Permission p)
BasicInvocationDispatcher.checkClientPermission
with the
specified permission.p
- the permission being checkedAccessControlException
- if permission is not grantedCopyright 2007-2013, multiple authors.
Licensed under the Apache License, Version 2.0, see the NOTICE file for attributions.