Module org.apache.derby.commons
Class SystemPermission
java.lang.Object
java.security.Permission
java.security.BasicPermission
org.apache.derby.shared.common.security.SystemPermission
- All Implemented Interfaces:
- Serializable,- Guard
This class represents access to system-wide Derby privileges.
 
  
| Permission | Description | Risk | 
|---|---|---|
| "jmx" "control" | Controls the ability of JMX clients to control Derby and view security sensitive attributes through Derby's MBeans. | JMX clients may be able to change the state of the running system | 
| "jmx" "monitor" | Controls the ability of JMX clients to
      monitor Derby through Derby's MBeans, such as viewing number of current connections and
      configuration settings.  Note: security related settings require controlaction onjmx | JMX clients can see information about a runing system including software versions. | 
- See Also:
- 
Field SummaryFieldsModifier and TypeFieldDescriptionstatic final StringAction ("control") to perform control actions through JMX on engine, server or jmx.static final StringPermission target name ("engine") for actions applicable to the core database engine.static final SystemPermissionConstant representingSystemPermission("engine, "monitor").static final StringPermission target name ("jmx") for actions applicable to management of Derby's JMX MBeans.static final StringAction ("monitor") to perform monitoring actions through JMX on engine and server.static final StringPermission target name ("server") for actions applicable to the network server.static final StringThe server and engine shutdown action ("shutdown").static final StringAction ("useDerbyInternals") by the engine to lookup Derby contexts.
- 
Constructor SummaryConstructorsConstructorDescriptionSystemPermission(String name, String actions) Creates a new SystemPermission with the specified name.
- 
Method SummaryModifier and TypeMethodDescriptionstatic StringbuildActionsString(Iterable<String> actions) Build a comma-separated actions string suitable for returning fromgetActions().booleanDoes this permission equal another object.Return the permission's actions in a canonical form.booleanimplies(Permission permission) Does this permission imply another.parseActions(String actions) Get a set of all actions specified in a string.toString()Methods inherited from class java.security.BasicPermissionhashCodeMethods inherited from class java.security.PermissioncheckGuard, getName
- 
Field Details- 
SERVERPermission target name ("server") for actions applicable to the network server.- See Also:
 
- 
ENGINEPermission target name ("engine") for actions applicable to the core database engine.- See Also:
 
- 
JMXPermission target name ("jmx") for actions applicable to management of Derby's JMX MBeans.- See Also:
 
- 
SHUTDOWNThe server and engine shutdown action ("shutdown").- See Also:
 
- 
CONTROLAction ("control") to perform control actions through JMX on engine, server or jmx.For JMX control permission is required to get attributes that are deemed sensiive from a security aspect, such as the network server's port number, security mechanisms and any information about the file system. - See Also:
 
- 
MONITORAction ("monitor") to perform monitoring actions through JMX on engine and server.- See Also:
 
- 
USE_DERBY_INTERNALSAction ("useDerbyInternals") by the engine to lookup Derby contexts.- See Also:
 
- 
ENGINE_MONITORConstant representingSystemPermission("engine, "monitor").
 
- 
- 
Constructor Details- 
SystemPermissionCreates a new SystemPermission with the specified name.- Parameters:
- name- the name of the SystemPermission
- Throws:
- NullPointerException- if name or actions is null
- IllegalArgumentException- if name is empty or not a legal SystemPermission
- See Also:
 
 
- 
- 
Method Details- 
getActionsReturn the permission's actions in a canonical form.- Overrides:
- getActionsin class- BasicPermission
 
- 
newPermissionCollection- Overrides:
- newPermissionCollectionin class- BasicPermission
 
- 
parseActionsGet a set of all actions specified in a string. Actions are transformed to lower-case, and leading and trailing blanks are stripped off.- Parameters:
- actions- the specified actions string
- Returns:
- a set of all the specified actions
 
- 
buildActionsStringBuild a comma-separated actions string suitable for returning fromgetActions().- Parameters:
- actions- the list of actions
- Returns:
- comma-separated string with the actions
 
- 
equalsDoes this permission equal another object. True if its and identical class with same name and (canonical) actions.- Overrides:
- equalsin class- BasicPermission
 
- 
impliesDoes this permission imply another. Only true if the other permission is a SystemPermission with the same name and all the actions of the permission are present in this. Note that none of the actions imply any other with this SystemPermission.- Overrides:
- impliesin class- BasicPermission
 
- 
toString- Overrides:
- toStringin class- Permission
 
 
-