Method to test whether a given user has permission to execute the given method. - Java Security

Java examples for Security:Permission

  1. HOME
  2. Java
  3. Security
  4. Permission

Description

Method to test whether a given user has permission to execute the given method.

Demo Code

/*//from ww  w. jav a  2  s . c  om
 *  Copyright (c) 2005-2009, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
 *
 *  WSO2 Inc. licenses this file to you under the Apache License,
 *  Version 2.0 (the "License"); you may not use this file except
 *  in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing,
 *  software distributed under the License is distributed on an
 *  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 *  KIND, either express or implied.  See the License for the
 *  specific language governing permissions and limitations
 *  under the License.
 *
 */
//package com.java2s;

import java.lang.management.ManagementPermission;
import java.util.List;
import java.util.Map;

public class Main {
    public static void main(String[] argv) throws Exception {
        checkSecurity();
    }

    /**
     * Method to test whether a given user has permission to execute the given
     * method.
     */
    public static void checkSecurity() {
        SecurityManager secMan = System.getSecurityManager();
        if (secMan != null) {
            secMan.checkPermission(new ManagementPermission("control"));
        }
    }

    /**
     * Method to test whether a given user has permission to execute the given
     * method.
     * 
     * @param allowedClasses
     *            the classes that are allowed to make calls irrespective of the
     *            user having desired permissions.
     */
    public static void checkSecurity(List<String> allowedClasses) {
        SecurityManager secMan = System.getSecurityManager();
        if (secMan != null) {
            StackTraceElement[] trace = Thread.currentThread()
                    .getStackTrace();
            String callingClass = trace[3].getClassName();
            if (!allowedClasses.contains(callingClass)) {
                secMan.checkPermission(new ManagementPermission("control"));
            }
        }
    }

    /**
     * Method to test whether a given user has permission to execute the given
     * method.
     * 
     * @param allowedMethods
     *            the methods that are allowed to make calls irrespective of the
     *            user having desired permissions.
     */
    public static void checkSecurity(Map<String, String> allowedMethods) {
        SecurityManager secMan = System.getSecurityManager();
        if (secMan != null) {
            StackTraceElement[] trace = Thread.currentThread()
                    .getStackTrace();
            for (int i = 3; i < trace.length; i++) {
                String callingClass = trace[i].getClassName();
                String methodName = trace[i].getMethodName();
                if (allowedMethods.keySet().contains(callingClass)
                        && allowedMethods.get(callingClass).equals(
                                methodName)) {
                    return;
                }
            }
            secMan.checkPermission(new ManagementPermission("control"));
        }
    }
}

Related Tutorials