oracle.jbo.script
Class ExprSecurityPolicy

java.lang.Object
  oracle.jbo.script.ExprSecurityPolicy

Direct Known Subclasses:

DefaultExprSecurityPolicy

public abstract class ExprSecurityPolicy
extends java.lang.Object

The base abstract class which defines the methods called by the security infrastructure on untrusted expressions. Extending this class will also override the default behavior of the security infrastructure, and should only be done rarely. Consider extending the DefaultExprSecurityPolicy class instead.

See Also:

DefaultExprSecurityPolicy

Constructor Summary

ExprSecurityPolicy()

Method Summary

protected abstract boolean	checkConstructor(java.lang.Class clazz) Check if a given class can be constructed.
protected abstract boolean	checkMethod(java.lang.Class clazz, java.lang.String method) Check if a given class has permission to execute a given method.
protected abstract boolean	checkMethod(java.lang.Object object, java.lang.Object method, java.lang.Object args) Check if a given object can execute the given method with the given arguments.
protected abstract boolean	checkProperty(java.lang.Object object, java.lang.String property, java.lang.Boolean readOnly) Check if a given property can be accessed on the given object.
protected abstract boolean	checkScriptMethod(java.lang.Object object, java.lang.String functionName) Check if a given function can be invoked in the context of the given object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExprSecurityPolicy

public ExprSecurityPolicy()

Method Detail

checkMethod

protected abstract boolean checkMethod(java.lang.Object object,
                                       java.lang.Object method,
                                       java.lang.Object args)

Check if a given object can execute the given method with the given arguments. This method will only be called at runtime.

Parameters:

object - The object whose method will be called.

method - The name of the method to call.

args - A argument, or array of arguments, which will be used on the method.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkProperty

protected abstract boolean checkProperty(java.lang.Object object,
                                         java.lang.String property,
                                         java.lang.Boolean readOnly)

Check if a given property can be accessed on the given object. This method will only be called at runtime.

Parameters:

object - The object on which the property will act.

property - The property to be accessed.

readOnly - true if the property is used in a read context, false if called in a write context, or null if the context cannot be reliably determined.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkMethod

protected abstract boolean checkMethod(java.lang.Class clazz,
                                       java.lang.String method)

Check if a given class has permission to execute a given method. This method may be called at design time, in addition to runtime.

Parameters:

clazz -

method -

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkConstructor

protected abstract boolean checkConstructor(java.lang.Class clazz)

Check if a given class can be constructed. This method may be called at design time, in addition to runtime.

Parameters:

clazz - The class to be constructed.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkScriptMethod

protected abstract boolean checkScriptMethod(java.lang.Object object,
                                             java.lang.String functionName)

Check if a given function can be invoked in the context of the given object. This method may be called at design time, in addition to runtime.

Parameters:

object - The context in which the function is invoked.

functionName - The invoked function's name

Returns:

true if checks pass, false (or a thrown exception) if checks fail.