Description of Figure Controlling Access to Resources

This image consists of a stack of six rectangles labeled, from top to bottom, as follows:

• ClassA

• ClassB

• FileInputStream: sm.checkPermission(perm)

  , where sm is an instance of SecurityManager and perm is an instance of FilePermission created by the FileInputStream constructor

• SecurityManager

• AccessController

• Policy

The image also includes a box labeled Authorization Data and a file named abc.

An arrow points from the Authorization Data box to the Policy rectangle.

An arrow labeled Access Granted or Denied points from the Policy rectangle to the abc file.