Module org.apache.derby.commons
Class SystemPermission
java.lang.Object
java.security.Permission
java.security.BasicPermission
org.apache.derby.shared.common.security.SystemPermission
- All Implemented Interfaces:
Serializable,Guard
This class represents access to system-wide Derby privileges.
| Permission | Description | Risk |
|---|---|---|
| "jmx" "control" | Controls the ability of JMX clients to control Derby and view security sensitive attributes through Derby's MBeans. | JMX clients may be able to change the state of the running system |
| "jmx" "monitor" | Controls the ability of JMX clients to
monitor Derby through Derby's MBeans, such as viewing number of current connections and
configuration settings. Note: security related settings require control
action on jmx | JMX clients can see information about a runing system including software versions. |
- See Also:
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final StringAction ("control") to perform control actions through JMX on engine, server or jmx.static final StringPermission target name ("engine") for actions applicable to the core database engine.static final SystemPermissionConstant representingSystemPermission("engine, "monitor").static final StringPermission target name ("jmx") for actions applicable to management of Derby's JMX MBeans.static final StringAction ("monitor") to perform monitoring actions through JMX on engine and server.static final StringPermission target name ("server") for actions applicable to the network server.static final StringThe server and engine shutdown action ("shutdown").static final StringAction ("useDerbyInternals") by the engine to lookup Derby contexts. -
Constructor Summary
ConstructorsConstructorDescriptionSystemPermission(String name, String actions) Creates a new SystemPermission with the specified name. -
Method Summary
Modifier and TypeMethodDescriptionstatic StringbuildActionsString(Iterable<String> actions) Build a comma-separated actions string suitable for returning fromgetActions().booleanDoes this permission equal another object.Return the permission's actions in a canonical form.booleanimplies(Permission permission) Does this permission imply another.parseActions(String actions) Get a set of all actions specified in a string.toString()Methods inherited from class java.security.BasicPermission
hashCodeMethods inherited from class java.security.Permission
checkGuard, getName
-
Field Details
-
SERVER
Permission target name ("server") for actions applicable to the network server.- See Also:
-
ENGINE
Permission target name ("engine") for actions applicable to the core database engine.- See Also:
-
JMX
Permission target name ("jmx") for actions applicable to management of Derby's JMX MBeans.- See Also:
-
SHUTDOWN
The server and engine shutdown action ("shutdown").- See Also:
-
CONTROL
Action ("control") to perform control actions through JMX on engine, server or jmx.For JMX control permission is required to get attributes that are deemed sensiive from a security aspect, such as the network server's port number, security mechanisms and any information about the file system.
- See Also:
-
MONITOR
Action ("monitor") to perform monitoring actions through JMX on engine and server.- See Also:
-
USE_DERBY_INTERNALS
Action ("useDerbyInternals") by the engine to lookup Derby contexts.- See Also:
-
ENGINE_MONITOR
Constant representingSystemPermission("engine, "monitor").
-
-
Constructor Details
-
SystemPermission
Creates a new SystemPermission with the specified name.- Parameters:
name- the name of the SystemPermission- Throws:
NullPointerException- if name or actions is nullIllegalArgumentException- if name is empty or not a legal SystemPermission- See Also:
-
-
Method Details
-
getActions
Return the permission's actions in a canonical form.- Overrides:
getActionsin classBasicPermission
-
newPermissionCollection
- Overrides:
newPermissionCollectionin classBasicPermission
-
parseActions
Get a set of all actions specified in a string. Actions are transformed to lower-case, and leading and trailing blanks are stripped off.- Parameters:
actions- the specified actions string- Returns:
- a set of all the specified actions
-
buildActionsString
Build a comma-separated actions string suitable for returning fromgetActions().- Parameters:
actions- the list of actions- Returns:
- comma-separated string with the actions
-
equals
Does this permission equal another object. True if its and identical class with same name and (canonical) actions.- Overrides:
equalsin classBasicPermission
-
implies
Does this permission imply another. Only true if the other permission is a SystemPermission with the same name and all the actions of the permission are present in this. Note that none of the actions imply any other with this SystemPermission.- Overrides:
impliesin classBasicPermission
-
toString
- Overrides:
toStringin classPermission
-