Class ServicePermission
java.lang.Object
java.security.Permission
javax.security.auth.kerberos.ServicePermission
- All Implemented Interfaces:
Serializable,Guard
A ServicePermission contains a service principal name and
a list of actions which specify the context the credential can be
used within.
The service principal name is the canonical name of the
KerberosPrincipal supplying the service, that is
the KerberosPrincipal represents a Kerberos service
principal. This name is treated in a case sensitive manner.
An asterisk may appear by itself, to signify any service principal.
The possible actions are:
initiate - allow the caller to use the credential to
initiate a security context with a service
principal.
accept - allow the caller to use the credential to
accept security context as a particular
principal.
- API Note:
- This permission cannot be used for controlling access to resources as the Security Manager is no longer supported.
- Since:
- 1.4
- See Also:
-
Constructor Summary
ConstructorsConstructorDescriptionServicePermission(String servicePrincipal, String action) Create a newServicePermissionwith the specifiedservicePrincipalandaction. -
Method Summary
Modifier and TypeMethodDescriptionbooleanChecks two ServicePermission objects for equality.Returns the canonical string representation of the actions.inthashCode()Returns the hash code value for this object.booleanChecks if this Kerberos service permission object "implies" the specified permission.Returns a PermissionCollection object for storing ServicePermission objects.Methods declared in class java.security.Permission
checkGuard, getName, toString
-
Constructor Details
-
ServicePermission
Create a newServicePermissionwith the specifiedservicePrincipalandaction.- Parameters:
servicePrincipal- the name of the service principal. An asterisk may appear by itself, to signify any service principal.action- the action string
-
-
Method Details
-
implies
Checks if this Kerberos service permission object "implies" the specified permission.More specifically, this method returns true if all the following are true (and returns false if any of them are not):
- p is an instanceof
ServicePermission, - p's actions are a proper subset of this
ServicePermission's actions, - p's name is equal to this
ServicePermission's name or thisServicePermission's name is "*".
- Specified by:
impliesin classPermission- Parameters:
p- the permission to check against.- Returns:
- true if the specified permission is implied by this object, false if not.
- p is an instanceof
-
equals
Checks two ServicePermission objects for equality.- Specified by:
equalsin classPermission- Parameters:
obj- the object to test for equality with this object.- Returns:
- true if
objis a ServicePermission, and has the same service principal, and actions as this ServicePermission object. - See Also:
-
hashCode
public int hashCode()Returns the hash code value for this object.- Specified by:
hashCodein classPermission- Returns:
- the hash code value for this object
- See Also:
-
getActions
Returns the canonical string representation of the actions. Always returns present actions in the following order: initiate, accept.- Specified by:
getActionsin classPermission- Returns:
- the actions of this
Permission.
-
newPermissionCollection
Returns a PermissionCollection object for storing ServicePermission objects.
ServicePermission objects must be stored in a manner that allows them to be inserted into the collection in any order, but that also enables the PermissionCollection implies method to be implemented in an efficient (and consistent) manner.- Overrides:
newPermissionCollectionin classPermission- Returns:
- a new PermissionCollection object suitable for storing ServicePermissions.
-