oracle.jbo.script

Class ExprSecurityPolicy

java.lang.Object

oracle.jbo.script.ExprSecurityPolicy

@Exported
public class ExprSecurityPolicy
extends java.lang.Object

The base class which defines the methods called by the security infrastructure on untrusted expressions. Extending this class will extend the behavior of the security infrastructure, providing an opportunity for additional checks after mandatory security checks take place.

See Also:

DefaultExprSecurityPolicy

Constructor Summary

Constructors

Constructor and Description
ExprSecurityPolicy()

Method Summary

Modifier and Type	Method and Description
boolean	checkAnnotation(java.lang.Class clazz) Check if a given annotation can be applied.
boolean	checkConstructor(java.lang.Class clazz) Check if a given class can be constructed.
boolean	checkMethod(java.lang.Class clazz, java.lang.String method) Check if a given class has permission to execute a given method.
boolean	checkMethod(java.lang.Object object, java.lang.Object method, java.lang.Object args) Check if a given object can execute the given method with the given arguments.
boolean	checkProperty(java.lang.Object object, java.lang.String property, java.lang.Boolean readOnly) Check if a given property can be accessed on the given object.
boolean	checkScriptMethod(java.lang.Object object, java.lang.String functionName) Check if a given function can be invoked in the context of the given object.
long	getLoopCapacity() Return the number of loop cycles that a script is allowed to execute, including calls to script functions and classes.
long	getTimeout() Return the amount, in milliseconds, of the timeout for untrusted expressions.
void	setTimeout(long timeout)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExprSecurityPolicy

public ExprSecurityPolicy()

Method Detail

checkMethod

public boolean checkMethod(java.lang.Object object,
                           java.lang.Object method,
                           java.lang.Object args)

Check if a given object can execute the given method with the given arguments. This method will only be called at runtime.

Parameters:

object - The object whose method will be called.

method - The name of the method to call.

args - A argument, or array of arguments, which will be used on the method.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkProperty

public boolean checkProperty(java.lang.Object object,
                             java.lang.String property,
                             java.lang.Boolean readOnly)

Check if a given property can be accessed on the given object. This method will only be called at runtime.

Parameters:

object - The object on which the property will act.

property - The property to be accessed.

readOnly - true if the property is used in a read context, false if called in a write context, or null if the context cannot be reliably determined.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkMethod

public boolean checkMethod(java.lang.Class clazz,
                           java.lang.String method)

Check if a given class has permission to execute a given method. This method may be called at design time, in addition to runtime.

Parameters:

clazz -

method -

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkAnnotation

public boolean checkAnnotation(java.lang.Class clazz)

Check if a given annotation can be applied. This method may be called at design time, in addition to runtime.

Parameters:

clazz - The annoattion to apply.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkConstructor

public boolean checkConstructor(java.lang.Class clazz)

Check if a given class can be constructed. This method may be called at design time, in addition to runtime.

Parameters:

clazz - The class to be constructed.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkScriptMethod

public boolean checkScriptMethod(java.lang.Object object,
                                 java.lang.String functionName)

Check if a given function can be invoked in the context of the given object. This method may be called at design time, in addition to runtime.

Parameters:

object - The context in which the function is invoked.

functionName - The invoked function's name

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

getTimeout

public long getTimeout()

Return the amount, in milliseconds, of the timeout for untrusted expressions. A value less than one is "no timeout". The default method will return the value set in the adfm-config section of adf-config.

Returns:

time, in milliseconds, for a timeout

getLoopCapacity

public long getLoopCapacity()

Return the number of loop cycles that a script is allowed to execute, including calls to script functions and classes. This is used to provide a memory threshold for scripts. The loop timer is not enough because it is possible for a script to go OOM before the timer is executed. The default method will return the value set in the adfm-config section of adf-config.

Returns:

capacity, in loop cycles, before a timeout

setTimeout

@Concealed
public void setTimeout(long timeout)

For internal use only. Application developers should not use this