|
||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
java.lang.Object | +--java.security.Permission | +--com.ibm.IBMPermission | +--com.tivoli.mts.PDPermission
This class represents an authorization permission for accessing a resource object in the protected domain defined by Policy Director.
PDPermission
allows usage of Policy Director as the authorization backend for normal Java 2
permission checks. In PD 3.7, ivacld offers an SSL-based access mode for remote ACL checking.
Permission check is done by implies() method which sets up an SSL-based connection
to a remote ivacld server for the authorization check.
Permissions are created with resource name and actions. They are immutable once they are created.
The actions must correspond to one of the operations for which a Policy Director permission has been defined. The actions strings use this format: [action group name]action list. Action group name is optional. Action list consists of action names which are one character in length. Examples of valid actions strings are: "[primary]rwc" "rw" "[java]rc[primary]rwx". The following is a list of action names defined and used in Policy Director.
The requested resource to query for must correspond to a resource that has been defined as a protected object within Policy Director's protected object namespace.
Constructor Summary | |
PDPermission(java.lang.String rname,
java.lang.String actions)
Creates a new PDPermission object with the specified actions and resource. |
Method Summary | |
boolean |
equals(java.lang.Object obj)
Checks two PDPermission objects for equality. |
java.lang.String |
getActions()
Returns the canonical string representation of the actions. |
PDMessages |
getPDMessages()
Converts any error codes received on the last implies() call into a PDMessages object and returns it. |
int |
hashCode()
Returns the hash code value for this object. |
boolean |
implies(PDPrincipal princ)
Checks if Policy Director grants the specified permissions to the PDPrincipal. |
boolean |
implies(PDPrincipal princ,
com.tivoli.mts.PDAttrs inputList,
com.tivoli.mts.PDAttrs outputList)
Checks if Policy Director grants the specified permissions to the PDPrincipal. |
boolean |
implies(java.security.Permission p)
Checks to see if Policy Director grants the specified permission. |
Methods inherited from class java.security.Permission |
checkGuard, getName, newPermissionCollection, toString |
Methods inherited from class java.lang.Object |
getClass, notify, notifyAll, wait, wait, wait |
Constructor Detail |
public PDPermission(java.lang.String rname, java.lang.String actions)
PDPermission
object with the specified actions and resource.
Action names can only be one character in length. Policy Director 3.6 supported the following actions:
rname
- name of the target resource object.actions
- name of the requested operations. The actions can be concatenated together
to form complex operation strings. The format is "["Method Detail |
public boolean implies(java.security.Permission p)
More specifically, this method returns true if:
implies
in class com.ibm.IBMPermission
p
- the permission to check.true
if the specified permission is granted
by Policy Director,false
if not.public boolean implies(PDPrincipal princ)
More specifically, this method returns true if:
PDPermission
's actions are a proper subset of this
object's action map, and
princ
- the PDPrincipal whose permissions will be checked.true
if the specified permission is implied by this object,
false
if not.public boolean implies(PDPrincipal princ, com.tivoli.mts.PDAttrs inputList, com.tivoli.mts.PDAttrs outputList)
More specifically, this method returns true if:
PDPermission
's actions are a proper subset of this
object's action map, and
princ
- the PDPrincipal whose permissions will be checked.inputList
- the input attribute list passed to server.outputList
- the output attribute list received from server.true
if the specified permission is implied by this object,
false
if not.public boolean equals(java.lang.Object obj)
equals
in class com.ibm.IBMPermission
obj
- the object we are testing for equality with this object.true
if obj is a PDPermission, and has the same name and
actions as this PDPermission object.public java.lang.String getActions()
getActions
in class java.security.Permission
public int hashCode()
hashCode
in class com.ibm.IBMPermission
public PDMessages getPDMessages()
null
is returned.null
.
|
||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||
SUMMARY: INNER | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |