AccessControlContext
is used to make system resource access
decisions based on the context it encapsulates.
More specifically, it encapsulates a context and
has a single method, checkPermission
,
that is equivalent to the checkPermission
method
in the AccessController
class, with one difference:
The checkPermission
method makes access decisions based on the
context it encapsulates,
rather than that of the current execution thread.
Thus, the purpose of AccessControlContext
is for those
situations where a security check that should be made within a given context
actually needs to be done from within a
different context (for example, from within a worker thread).
An AccessControlContext
is created by calling the
AccessController.getContext
method.
The getContext
method takes a "snapshot"
of the current calling context, and places
it in an AccessControlContext
object, which it returns.
A sample call is the following:
AccessControlContext acc = AccessController.getContext()
Code within a different context can subsequently call the
checkPermission
method on the
previously-saved AccessControlContext
object. A sample call is the
following:
acc.checkPermission(permission)
- Since:
- 1.2
- See Also:
-
Constructor Summary
ConstructorDescriptionAccessControlContext
(AccessControlContext acc, DomainCombiner combiner) Deprecated, for removal: This API element is subject to removal in a future version.Create a newAccessControlContext
with the givenAccessControlContext
andDomainCombiner
.AccessControlContext
(ProtectionDomain[] context) Deprecated, for removal: This API element is subject to removal in a future version.Create anAccessControlContext
with the given array ofProtectionDomain
objects. -
Method Summary
Modifier and TypeMethodDescriptionvoid
checkPermission
(Permission perm) Deprecated, for removal: This API element is subject to removal in a future version.Determines whether the access request indicated by the specified permission should be allowed or denied, based on the security policy currently in effect, and the context in this object.boolean
Deprecated, for removal: This API element is subject to removal in a future version.Checks twoAccessControlContext
objects for equality.Deprecated, for removal: This API element is subject to removal in a future version.Get theDomainCombiner
associated with thisAccessControlContext
.int
hashCode()
Deprecated, for removal: This API element is subject to removal in a future version.Returns the hash code value for this context.
-
Constructor Details
-
AccessControlContext
Deprecated, for removal: This API element is subject to removal in a future version.Create anAccessControlContext
with the given array ofProtectionDomain
objects. Context must not benull
. Duplicate domains will be removed from the context.- Parameters:
context
- theProtectionDomain
objects associated with this context. The non-duplicate domains are copied from the array. Subsequent changes to the array will not affect thisAccessControlContext
.- Throws:
NullPointerException
- ifcontext
isnull
-
AccessControlContext
Deprecated, for removal: This API element is subject to removal in a future version.Create a newAccessControlContext
with the givenAccessControlContext
andDomainCombiner
. This constructor associates the providedDomainCombiner
with the providedAccessControlContext
.- Parameters:
acc
- theAccessControlContext
associated with the providedDomainCombiner
.combiner
- theDomainCombiner
to be associated with the providedAccessControlContext
.- Throws:
NullPointerException
- if the providedcontext
isnull
.SecurityException
- if a security manager is installed and the caller does not have the "createAccessControlContext"SecurityPermission
- Since:
- 1.3
-
-
Method Details
-
getDomainCombiner
Deprecated, for removal: This API element is subject to removal in a future version.Get theDomainCombiner
associated with thisAccessControlContext
.- Returns:
- the
DomainCombiner
associated with thisAccessControlContext
, ornull
if there is none. - Throws:
SecurityException
- if a security manager is installed and the caller does not have the "getDomainCombiner"SecurityPermission
- Since:
- 1.3
-
checkPermission
Deprecated, for removal: This API element is subject to removal in a future version.Determines whether the access request indicated by the specified permission should be allowed or denied, based on the security policy currently in effect, and the context in this object. The request is allowed only if everyProtectionDomain
in the context implies the permission. Otherwise the request is denied.This method quietly returns if the access request is permitted, or throws a suitable
AccessControlException
otherwise.- Parameters:
perm
- the requested permission.- Throws:
AccessControlException
- if the specified permission is not permitted, based on the current security policy and the context encapsulated by this object.NullPointerException
- if the permission to check for isnull
.
-
equals
Deprecated, for removal: This API element is subject to removal in a future version.Checks twoAccessControlContext
objects for equality. Checks thatobj
is anAccessControlContext
and has the same set ofProtectionDomain
objects as this context. -
hashCode
public int hashCode()Deprecated, for removal: This API element is subject to removal in a future version.Returns the hash code value for this context. The hash code is computed by exclusive or-ing the hash code of all the protection domains in the context together.
-