JDKでのアクセス権

java.awt.Toolkit
  public final EventQueue
    getSystemEventQueue()

some.package.class
  public static void someMethod(String foo);

java.awt.Graphics2d
  public abstract void
    setComposite(Composite comp)

java.awt.Robot
  public Robot()
  public Robot(GraphicsDevice screen)

java.awt.Toolkit
  public void addAWTEventListener(
    AWTEventListener listener,
    long eventMask)
  public void removeAWTEventListener(
    AWTEventListener listener)

java.awt.Toolkit
  public abstract PrintJob getPrintJob(
    Frame frame, String jobtitle,
    Properties props)

java.lang.RuntimePermission "queuePrintJob"

注意: getPrintJobメソッドは、実際には抽象であるため、セキュリティ・チェックを呼び出すことはできない。このメソッドの実際の各実装部分では、java.lang.SecurityManager checkPrintJobAccessメソッドを呼び出す必要があり、これは、アクセス権java.lang.RuntimePermission "queuePrintJob"が現在許可されている場合にのみ成功する。

java.awt.Toolkit
  public abstract Clipboard
    getSystemClipboard()

java.awt.AWTPermission "accessClipboard"

注意: getSystemClipboardメソッドは、実際には抽象であるため、セキュリティ・チェックを呼び出すことはできない。このメソッドの実際の各実装部分では、checkPermissionメソッドを呼び出す必要があり、これは、アクセス権java.awt.AWTPermission "accessClipboard"が現在許可されている場合にのみ成功する。

java.awt.Toolkit
  public final EventQueue
    getSystemEventQueue()

java.awt.Window Window()

java.beans.Beans
  public static void setDesignTime(
    boolean isDesignTime)
  public static void setGuiAvailable(
    boolean isGuiAvailable)

java.beans.Introspector
  public static synchronized void
    setBeanInfoSearchPath(String path[])

java.beans.PropertyEditorManager
  public static void registerEditor(
    Class targetType,
    Class editorClass)
  public static synchronized void
    setEditorSearchPath(String path[])

java.io.File
  public boolean delete()
  public void deleteOnExit()

java.io.FileInputStream
  FileInputStream(FileDescriptor fdObj)

java.io.FileInputStream
  FileInputStream(String name)
  FileInputStream(File file)

java.io.File
  public boolean exists()
  public boolean canRead()
  public boolean isFile()
  public boolean isDirectory()
  public boolean isHidden()
  public long lastModified()
  public long length()
  public String[] list()
  public String[] list(
    FilenameFilter filter)
  public File[] listFiles()
  public File[] listFiles(
    FilenameFilter filter)
  public File[] listFiles(
    FileFilter filter)

java.io.RandomAccessFile
  RandomAccessFile(String name, String mode)
  RandomAccessFile(File file, String mode)

(モードは、両方のRandomAccessFileコンストラクタで「r」)

java.io.FileOutputStream
  FileOutputStream(FileDescriptor fdObj)

java.io.FileOutputStream
  FileOutputStream(File file)
  FileOutputStream(String name)
  FileOutputStream(
    String name,
    boolean append)

java.io.File
  public boolean canWrite()
  public boolean createNewFile()
  public static File createTempFile(
    String prefix, String suffix)
  public static File createTempFile(
    String prefix,
    String suffix,
    File directory)
  public boolean mkdir()
  public boolean mkdirs()
  public boolean renameTo(File dest)
  public boolean setLastModified(long time)
  public boolean setReadOnly()

java.io.ObjectInputStream
  protected final boolean
    enableResolveObject(boolean enable);

java.io.ObjectOutputStream
  protected final boolean
    enableReplaceObject(boolean enable)

java.io.ObjectInputStream
  protected ObjectInputStream()

java.io.ObjectOutputStream
  protected ObjectOutputStream()

java.io.RandomAccessFile
  RandomAccessFile(String name, String mode)      

(モードは「rw」)

java.lang.Class
  public static Class forName(
    String name,
    boolean initialize,
    ClassLoader loader)

java.lang.Class
  public ClassLoader getClassLoader()

java.lang.Class
  public Class[] getDeclaredClasses()
  public Field[] getDeclaredFields()
  public Method[] getDeclaredMethods()
  public Constructor[]
    getDeclaredConstructors()
  public Field getDeclaredField(
    String name)
  public Method getDeclaredMethod(...)
  public Constructor
    getDeclaredConstructor(...)

java.lang.Class
  public Class[] getClasses()
  public Field[] getFields()
  public Method[] getMethods()
  public Constructor[] getConstructors()
  public Field getField(String name)
  public Method getMethod(...)
  public Constructor getConstructor(...)

java.lang.Class
  public ProtectionDomain
    getProtectionDomain()

java.lang.ClassLoader
  ClassLoader()
  ClassLoader(ClassLoader parent)

java.lang.ClassLoader
  public static ClassLoader
    getSystemClassLoader()
  public ClassLoader getParent()

java.lang.Runtime
  public Process exec(String command)
  public Process exec(
    String command,
    String envp[])
  public Process exec(String cmdarray[])
  public Process exec(
    String cmdarray[],
    String envp[])

java.lang.Runtime
  public void exit(int status)
  public static void
    runFinalizersOnExit(boolean value)

java.lang.System
  public static void exit(int status)
  public static void
    runFinalizersOnExit(boolean value)

java.lang.Runtime
  public void addShutdownHook(Thread hook)
  public boolean removeShutdownHook(Thread hook)

java.lang.Runtime
  public void load(String lib)
  public void loadLibrary(String lib)

java.lang.System
  public static void load(String filename)
  public static void loadLibrary(
    String libname)

java.lang.SecurityManagerメソッド

java.lang.System
  public static Properties
    getProperties()
  public static void
    setProperties(Properties props)

java.lang.System
  public static String
    getProperty(String key)
  public static String
    getProperty(String key, String def)

java.lang.System
  public static void setIn(InputStream in)
  public static void setOut(PrintStream out)
  public static void setErr(PrintStream err)

java.lang.System
  public static String
    setProperty(String key, String value)

java.lang.System
  public static synchronized void
    setSecurityManager(SecurityManager s)

java.lang.Thread
  public ClassLoader getContextClassLoader()

java.lang.Thread
  public void setContextClassLoader(
    ClassLoader cl)

java.lang.Thread
  public final void checkAccess()
  public void interrupt()
  public final void suspend()
  public final void resume()
  public final void setPriority(
    int newPriority)
  public final void setName(
    String name)
  public final void setDaemon(
    boolean on)

java.lang.Thread
  public static int
    enumerate(Thread tarray[])

java.lang.Thread
  public final void stop()

現在のスレッドが自分以外のスレッドを停止させようとしている場合、java.lang.RuntimePermission "stopThread"も必要。

java.lang.Thread
  public final synchronized void
    stop(Throwable obj)

現在のスレッドが自分以外のスレッドを停止させようとしている場合、またはobjがThreadDeathのインスタンスではない場合は、java.lang.RuntimePermission "stopThread"も必要。

java.lang.Thread
  Thread()
  Thread(Runnable target)
  Thread(String name)
  Thread(Runnable target, String name)

java.lang.ThreadGroup
  ThreadGroup(String name)
  ThreadGroup(
    ThreadGroup parent,
    String name)

java.lang.Thread
  Thread(ThreadGroup group, ...)

java.lang.ThreadGroup
  public final void checkAccess()
  public int enumerate(Thread list[])
  public int enumerate(
    Thread list[],
    boolean recurse)
  public int enumerate(ThreadGroup list[])
  public int enumerate(
    ThreadGroup list[],
    boolean recurse)
  public final ThreadGroup getParent()
  public final void setDaemon(
    boolean daemon)
  public final void setMaxPriority(int pri)
  public final void suspend()
  public final void resume()
  public final void destroy()

java.lang.ThreadGroup
  public final void interrupt()

java.lang.ThreadGroup
  public final void stop()

java.lang.reflect.AccessibleObject
  public static void setAccessible(...)
  public void setAccessible(...)

java.net.Authenticator
  public static PasswordAuthentication
    requestPasswordAuthentication(
      InetAddress addr,
      int port,
      String protocol,
      String prompt,
      String scheme)

java.net.Authenticator
  public static void
    setDefault(Authenticator a)

java.net.MulticastSocket
  public void
    joinGroup(InetAddress mcastaddr)
  public void
    leaveGroup(InetAddress mcastaddr)

java.net.DatagramSocket
  public void send(DatagramPacket p)

if (p.getAddress().isMulticastAddress()) {
  java.net.SocketPermission(
    (p.getAddress()).getHostAddress(),
    "accept,connect")
} else {
  port = p.getPort();
  host = p.getAddress().getHostAddress();
  if (port == -1)
    java.net.SocketPermission "{host}","resolve";
  else
    java.net.SocketPermission "{host}:{port}","connect";
}

java.net.MulticastSocket
  public synchronized void
    send(DatagramPacket p, byte ttl)

if (p.getAddress().isMulticastAddress()) {
  java.net.SocketPermission(
    (p.getAddress()).getHostAddress(),
    "accept,connect")
} else {
  port = p.getPort();
  host = p.getAddress().getHostAddress();
  if (port == -1)
    java.net.SocketPermission "{host}","resolve";
  else
    java.net.SocketPermission "{host}:{port}","connect"
}

java.net.InetAddress
  public String getHostName()
  public static InetAddress[]
    getAllByName(String host)
  public static InetAddress getLocalHost()

java.net.DatagramSocket
  public InetAddress getLocalAddress()

java.net.ServerSocket
  ServerSocket(...)

java.net.DatagramSocket
  DatagramSocket(...)

java.net.MulticastSocket
  MulticastSocket(...)

java.net.ServerSocket
  public Socket accept()
  protected final void implAccept(Socket s)

java.net.ServerSocket
  public static synchronized void
    setSocketFactory(...)

java.net.Socket
  public static synchronized void
    setSocketImplFactory(...)

java.net.URL
  public static synchronized void
    setURLStreamHandlerFactory(...)

java.net.URLConnection
  public static synchronized void
    setContentHandlerFactory(...)
  public static void
    setFileNameMap(FileNameMap map)

java.net.HttpURLConnection
  public static void
    setFollowRedirects(boolean set)

java.rmi.activation.ActivationGroup
  public static synchronized
    ActivationGroup createGroup(...)
  public static synchronized void
    setSystem(ActivationSystem system)

java.rmi.server.RMISocketFactory
  public synchronized static void
    setSocketFactory(...)

java.net.Socket
  Socket(...)

java.net.DatagramSocket
  public synchronized void
    receive(DatagramPacket p)

java.net.URL URL(...)

java.net.URLClassLoader
  URLClassLoader(...)

java.security.AccessControlContext
  public AccessControlContext(
    AccessControlContext acc,
    DomainCombiner combiner)
  public DomainCombiner getDomainCombiner()

java.security.Identity
  public void addCertificate(...)

java.security.Identity
  public void removeCertificate(...)

java.security.Identity
  public void setInfo(String info)

java.security.Identity
  public void setPublicKey(PublicKey key)

java.security.Identity
  public String toString(...)

java.security.IdentityScope
  protected static void setSystemScope()

java.security.Permission
  public void checkGuard(Object object)

java.security.Policy
  public static Policy getPolicy()

java.security.Policy
  public static void
    setPolicy(Policy policy)

java.security.Policy
  public static Policy
    getInstance(
      String type,
      SpiParameter params)
    getInstance(
      String type,
      SpiParameter params,
      String provider)
    getInstance(
      String type,
      SpiParameter params,
      Provider provider)

java.security.Provider
  public synchronized void clear()

java.security.Provider
  public synchronized Object
    put(Object key, Object value)

java.security.Provider
  public synchronized Object
    remove(Object key)

java.security.SecureClassLoader
  SecureClassLoader(...)

java.security.Security
  public static void getProperty(String key)

java.security.Security
  public static int
    addProvider(Provider provider)
  public static int
    insertProviderAt(
      Provider provider,
      int position);

java.security.Security
  public static void
    removeProvider(String name)

java.security.Security
  public static void
    setProperty(String key, String datum)

java.security.Signer
  public PrivateKey getPrivateKey()

java.security.Signer
  public final void
    setKeyPair(KeyPair pair)

java.sql.DriverManager
  public static synchronized void
    setLogWriter(PrintWriter out)

java.sql.DriverManager
  public static synchronized void
    setLogStream(PrintWriter out)

java.util.Locale
  public static synchronized void
    setDefault(Locale newLocale)

java.util.zip.ZipFile
  ZipFile(String name)

javax.security.auth.Subject
  public static Subject getSubject(
    final AccessControlContext acc)

javax.security.auth.Subject
  public void setReadOnly()

javax.security.auth.Subject
  public static Object doAs(
    final Subject subject,
    final PrivilegedAction action)

javax.security.auth.Subject
  public static Object doAs(
    final Subject subject,
    final PrivilegedExceptionAction action)
    throws
      java.security.PrivilegedActionException

javax.security.auth.Subject
  public static Object doAsPrivileged(
    final Subject subject,
    final PrivilegedAction action,
    final AccessControlContext acc)

javax.security.auth.Subject
  public static Object doAsPrivileged(
    final Subject subject,
    final PrivilegedExceptionAction action,
    final AccessControlContext acc)
      throws
        java.security.PrivilegedActionException

javax.security.auth.SubjectDomainCombiner
  public Subject getSubject()

javax.security.auth.SubjectDomainCombiner
  public Subject getSubject()

javax.security.auth.login.LoginContext
  public LoginContext(String name)
    throws LoginException

javax.security.auth.login.LoginContext
  public LoginContext(
    String name,
    Subject subject)
    throws LoginException

javax.security.auth.login.LoginContext
  public LoginContext(
    String name,
    CallbackHandler callbackHandler)
    throws LoginException

javax.security.auth.login.LoginContext
  public LoginContext(
    String name,
    Subject subject,
    CallbackHandler callbackHandler)
    throws LoginException

javax.security.auth.login.Configuration
  public static Configuration
    getConfiguration()

javax.security.auth.login.Configuration
  public static void setConfiguration(
    Configuration configuration)

javax.security.auth.login.Configuration
    public static void refresh()

javax.security.auth.login.Configuration
  public static Configuration
    getInstance(
      String type,
      SpiParameter params)
    getInstance(
      String type,
      SpiParameter params,
      String provider)
    getInstance(String type,
      SpiParameter params,
      Provider provider)

public void checkAccept(String host, int port);

java.net.SocketPermission "{host}:{port}", "accept";

public void checkAccess(Thread t);

java.lang.RuntimePermission "modifyThread";

public void checkAccess(ThreadGroup g);

java.lang.RuntimePermission "modifyThreadGroup";

public void checkAwtEventQueueAccess(); 

java.awt.AWTPermission "accessEventQueue";

public void checkConnect(String host, int port);

if (port == -1) 
  java.net.SocketPermission "{host}","resolve";
else
  java.net.SocketPermission "{host}:{port}","connect";

public void checkConnect(
  String host,
  int port,
  Object context);

if (port == -1)
  java.net.SocketPermission "{host}","resolve";
else
  java.net.SocketPermission "{host}:{port}","connect";

public void checkCreateClassLoader();

java.lang.RuntimePermission "createClassLoader";

public void checkDelete(String file);

java.io.FilePermission "{file}", "delete";

public void checkExec(String cmd);

cmdが絶対パスの場合:

  java.io.FilePermission "{cmd}", "execute";

それ以外の場合

  java.io.FilePermission "<<ALL_FILES>>", "execute";

public void checkExit(int status);

java.lang.RuntimePermission "exitVM.{status}";

public void checkLink(String lib);

java.lang.RuntimePermission "loadLibrary.{lib}";

public void checkListen(int port);

java.net.SocketPermission "localhost:{port}","listen";

public void checkMemberAccess(Class clazz, int which);

if (which != Member.PUBLIC) {
  if (currentClassLoader() != clazz.getClassLoader()) {
    checkPermission(
      new java.lang.RuntimePermission(
        "accessDeclaredMembers"));
  }
}

public void checkMulticast(InetAddress maddr);

java.net.SocketPermission(
  maddr.getHostAddress(),"accept,connect");

public void checkMulticast(InetAddress maddr, byte ttl); 

java.net.SocketPermission(
  maddr.getHostAddress(),"accept,connect");

public void checkPackageAccess(String pkg);

java.lang.RuntimePermission "accessClassInPackage.{pkg}";

public void checkPackageDefinition(String pkg);

java.lang.RuntimePermission "defineClassInPackage.{pkg}";

public void checkPrintJobAccess();

java.lang.RuntimePermission "queuePrintJob";

public void checkPropertiesAccess();

java.util.PropertyPermission "*", "read,write";

public void checkPropertyAccess(String key);

java.util.PropertyPermission "{key}", "read,write";

public void checkRead(FileDescriptor fd);

java.lang.RuntimePermission "readFileDescriptor";

public void checkRead(String file);

java.io.FilePermission "{file}", "read";

public void checkRead(String file, Object context);

java.io.FilePermission "{file}", "read";

public void checkSecurityAccess(String target);

java.security.SecurityPermission "{target}";

public void checkSetFactory();

java.lang.RuntimePermission "setFactory";

public void checkSystemClipboardAccess(); 

java.awt.AWTPermission "accessClipboard";

public boolean checkTopLevelWindow(Object window); 

java.awt.AWTPermission "showWindowWithoutWarningBanner";

public void checkWrite(FileDescriptor fd);

java.lang.RuntimePermission "writeFileDescriptor";

public void checkWrite(String file);

java.io.FilePermission "{file}", "write";

public SecurityManager();

java.lang.RuntimePermission "createSecurityManager";