Class JDOPermission
java.lang.Object
java.security.Permission
java.security.BasicPermission
javax.jdo.spi.JDOPermission
- All Implemented Interfaces:
Serializable, Guard
The
JDOPermission class is for operations that are reserved for
JDO implementations and should not be called by other code. A
JDOPermission is a named permission and has no
actions. There are two names currently defined. Each named permission
has a corresponding public static final field which contains an instance
of the named permission.
The following table provides a summary description of what each named permission allows, and discusses the risks of granting code the permission.
| Permission Target Name | What the Permission Allows | Risks of Allowing this Permission |
|---|---|---|
setStateManager |
This allows setting the StateManager for an instance of
PersistenceCapable. The StateManager
has unlimited access to get and set persistent and transactional fields of
the PersistenceCapable instance. |
This is dangerous in that information (possibly confidential) normally unavailable would be accessible to malicious code. |
getMetadata |
This allows getting metadata for any PersistenceCapable
class that has registered with JDOImplHelper. |
This is dangerous in that metadata information (possibly confidential) normally unavailable would be accessible to malicious code. |
manageMetadata |
This allows managing metadata for any PersistenceCapable
class that has registered with JDOImplHelper. |
This is dangerous in that metadata information (possibly confidential) normally unavailable would be manageable (modifiable) by malicious code. |
closePersistenceManagerFactory |
This allows closing a PersistenceManagerFactory,
thereby releasing resources. |
This is dangerous in that resources bound to the
PersistenceManagerFactory would be releaseable by
malicious code. |
- Version:
- 1.0.2
- See Also:
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final JDOPermissionAn instance ofJDOPermissionto be used forclosePersistenceManagerFactorypermission checking.static final JDOPermissionAn instance ofJDOPermissionto be used forgetMetadatapermission checking.static final JDOPermissionAn instance ofJDOPermissionto be used formanageMetadatapermission checking.static final JDOPermissionAn instance ofJDOPermissionto be used forsetStateManagerpermission checking. -
Constructor Summary
ConstructorsConstructorDescriptionJDOPermission(String name) Constructs aJDOPermissionwith the specified name.JDOPermission(String name, String actions) Constructs aJDOPermissionwith the specified name and actions. -
Method Summary
Methods inherited from class BasicPermission
equals, getActions, hashCode, implies, newPermissionCollectionMethods inherited from class Permission
checkGuard, getName, toString
-
Field Details
-
GET_METADATA
An instance ofJDOPermissionto be used forgetMetadatapermission checking. -
MANAGE_METADATA
An instance ofJDOPermissionto be used formanageMetadatapermission checking.- Since:
- 1.0.2
-
SET_STATE_MANAGER
An instance ofJDOPermissionto be used forsetStateManagerpermission checking. -
CLOSE_PERSISTENCE_MANAGER_FACTORY
An instance ofJDOPermissionto be used forclosePersistenceManagerFactorypermission checking.- Since:
- 1.0.1
-
-
Constructor Details
-
JDOPermission
Constructs aJDOPermissionwith the specified name.- Parameters:
name- the name of theJDOPermission
-
JDOPermission
Constructs aJDOPermissionwith the specified name and actions. The actions should benull; they are ignored. This constructor exists for use by thePolicyobject to instantiate newPermissionobjects.- Parameters:
name- the name of theJDOPermissionactions- should benull.
-