Java Development Kit (JDK)でのアクセス権

java.awt.Graphics2d
  public abstract void
    setComposite(Composite comp)

java.awt.Robot
  public Robot()
  public Robot(GraphicsDevice screen)

java.awt.Toolkit
  public void addAWTEventListener(
          AWTEventListener listener,
          long eventMask)
  public void removeAWTEventListener(
     AWTEventListener listener)

java.awt.Toolkit
  public abstract PrintJob getPrintJob(
           Frame frame, String jobtitle,
           Properties props)

java.lang.RuntimePermission "queuePrintJob"

注: getPrintJobメソッドは、実際には抽象であるため、セキュリティ・チェックを呼び出すことはできない。このメソッドの実際の各実装部分では、java.lang.SecurityManagerのcheckPrintJobAccessメソッドを呼び出すべきであり、これは、アクセス権java.lang.RuntimePermission "queuePrintJob"が現在許可されている場合にのみ成功する。

java.awt.Toolkit
  public abstract Clipboard
                    getSystemClipboard()

java.awt.AWTPermission "accessClipboard"

注: getSystemClipboardメソッドは、実際には抽象であるため、セキュリティ・チェックを呼び出すことはできない。このメソッドの実際の各実装部分では、checkPermissionメソッドを呼び出すべきであり、これは、アクセス権java.awt.AWTPermission "accessClipboard"が現在許可されている場合にのみ成功する。

java.awt.Toolkit
  public final EventQueue
               getSystemEventQueue()

java.awt.Window
  Window()

java.beans.Beans
  public static void setDesignTime(
                 boolean isDesignTime)
  public static void setGuiAvailable(
                 boolean isGuiAvailable)

java.beans.Introspector
  public static synchronized void
    setBeanInfoSearchPath(String path[])

java.beans.PropertyEditorManager
  public static void registerEditor(
                 Class targetType,
                 Class editorClass)
  public static synchronized void
    setEditorSearchPath(String path[])

java.io.File
  public boolean delete()
  public void deleteOnExit()

java.io.FileInputStream
  FileInputStream(FileDescriptor fdObj)

java.io.FileInputStream
  FileInputStream(String name)
  FileInputStream(File file)

java.io.File
  public boolean exists()
  public boolean canRead()
  public boolean isFile()
  public boolean isDirectory()
  public boolean isHidden()
  public long lastModified()
  public long length()
  public String[] list()
  public String[] list(
           FilenameFilter filter)
  public File[] listFiles()
  public File[] listFiles(
           FilenameFilter filter)
  public File[] listFiles(
           FileFilter filter)

java.io.RandomAccessFile
  RandomAccessFile(String name, String mode)
  RandomAccessFile(File file, String mode)
      (where mode is "r" in both of these)

java.io.FileOutputStream
  FileOutputStream(FileDescriptor fdObj)

java.io.FileOutputStream
  FileOutputStream(File file)
  FileOutputStream(String name)
  FileOutputStream(String name,
                   boolean append)

java.io.File
  public boolean canWrite()
  public boolean createNewFile()
  public static File createTempFile(
          String prefix, String suffix)
  public static File createTempFile(
          String prefix,  String suffix,
          File directory)
  public boolean mkdir()
  public boolean mkdirs()
  public boolean renameTo(File dest)
  public boolean setLastModified(long time)
  public boolean setReadOnly()

java.io.ObjectInputStream
  protected final boolean
    enableResolveObject(boolean enable);

java.io.ObjectOutputStream
  protected final boolean
    enableReplaceObject(boolean enable)

java.io.ObjectInputStream
  protected ObjectInputStream()

java.io.ObjectOutputStream
  protected ObjectOutputStream()

java.io.RandomAccessFile
  RandomAccessFile(String name, String mode)
      (where mode is "rw")

java.lang.Class
  public static Class forName(
     String name, boolean initialize,
     ClassLoader loader)

java.lang.Class
  public ClassLoader getClassLoader()

java.lang.Class
  public Class[] getDeclaredClasses()
  public Field[] getDeclaredFields()
  public Method[] getDeclaredMethods()
  public Constructor[]
    getDeclaredConstructors()
  public Field getDeclaredField(
                       String name)
  public Method getDeclaredMethod(...)
  public Constructor
    getDeclaredConstructor(...)

java.lang.Class
  public Class[] getClasses()
  public Field[] getFields()
  public Method[] getMethods()
  public Constructor[] getConstructors()
  public Field getField(String name)
  public Method getMethod(...)
  public Constructor getConstructor(...)

java.lang.Class
   public ProtectionDomain
            getProtectionDomain()

java.lang.ClassLoader
  ClassLoader()
  ClassLoader(ClassLoader parent)

java.lang.ClassLoader
  public static ClassLoader
           getSystemClassLoader()
  public ClassLoader getParent()

java.lang.Runtime
  public Process exec(String command)
  public Process exec(String command,
                      String envp[])
  public Process exec(String cmdarray[])
  public Process exec(String cmdarray[],
                      String envp[])

java.lang.Runtime
  public void exit(int status)
  public static void
      runFinalizersOnExit(boolean value)
java.lang.System
  public static void exit(int status)
  public static void
      runFinalizersOnExit(boolean value)

java.lang.Runtime
  public void addShutdownHook(Thread hook)
  public boolean removeShutdownHook(Thread hook)

java.lang.Runtime
  public void load(String lib)
  public void loadLibrary(String lib)
java.lang.System
  public static void load(String filename)
  public static void loadLibrary(
                          String libname)

java.lang.SecurityManager methods

java.lang.System
  public static Properties
      getProperties()
  public static void
      setProperties(Properties props)

java.lang.System
  public static String
      getProperty(String key)
  public static String
      getProperty(String key, String def)

java.lang.System
  public static void setIn(InputStream in)
  public static void setOut(PrintStream out)
  public static void setErr(PrintStream err)

java.lang.System
  public static String
    setProperty(String key, String value)

java.lang.System
  public static synchronized void
    setSecurityManager(SecurityManager s)

java.lang.Thread
  public ClassLoader getContextClassLoader()

java.lang.Thread
  public void setContextClassLoader
                      (ClassLoader cl)

java.lang.Thread
  public final void checkAccess()
  public void interrupt()
  public final void suspend()
  public final void resume()
  public final void setPriority
                     (int newPriority)
  public final void setName(String name)
  public final void setDaemon(boolean on)

java.lang.Thread
  public static int
      enumerate(Thread tarray[])

java.lang.Thread
  public final void stop()

現在のスレッドが自分以外のスレッドを停止させようとしている場合、java.lang.RuntimePermission "stopThread"も必要。

java.lang.Thread
  public final synchronized void
                    stop(Throwable obj)

現在のスレッドが自分以外のスレッドを停止させようとしている場合、またはobjがThreadDeathのインスタンスではない場合は、java.lang.RuntimePermission "stopThread"も必要。

java.lang.Thread
  Thread()
  Thread(Runnable target)
  Thread(String name)
  Thread(Runnable target, String name)

java.lang.ThreadGroup
  ThreadGroup(String name)
  ThreadGroup(ThreadGroup parent,
              String name)

java.lang.Thread
  Thread(ThreadGroup group, ...)

java.lang.ThreadGroup
  public final void checkAccess()
  public int enumerate(Thread list[])
  public int enumerate(Thread list[],
      boolean recurse)
  public int enumerate(ThreadGroup list[])
  public int enumerate(ThreadGroup list[],
      boolean recurse)
  public final ThreadGroup getParent()
  public final void
      setDaemon(boolean daemon)
  public final void setMaxPriority(int pri)
  public final void suspend()
  public final void resume()
  public final void destroy()

java.lang.ThreadGroup
  public final void interrupt()

java.lang.ThreadGroup
  public final void stop()

java.lang.reflect.AccessibleObject
  public static void setAccessible(...)
  public void setAccessible(...)

java.net.Authenticator
  public static PasswordAuthentication
       requestPasswordAuthentication(
             InetAddress addr,
             int port,
             String protocol,
             String prompt,
             String scheme)

java.net.Authenticator
  public static void
      setDefault(Authenticator a)

java.net.MulticastSocket
  public void
      joinGroup(InetAddress mcastaddr)
  public void
      leaveGroup(InetAddress mcastaddr)

java.net.DatagramSocket
  public void send(DatagramPacket p)

checkConnect( p.getAddress().getHostAddress(), p.getPort())

if (p.getAddress().isMulticastAddress()) 
{ java.net.SocketPermission( (p.getAddress()).getHostAddress(), "accept,connect") } 
else {port = p.getPort();
host = p.getAddress().getHostAddress();
if (port == -1)
 java.net.SocketPermission "{host}","resolve";
else 
java.net.SocketPermission "{host}:{port}","connect"

java.net.MulticastSocket
  public synchronized void
      send(DatagramPacket p, byte ttl)

checkConnect( p.getAddress().getHostAddress(), p.getPort())

if (p.getAddress().isMulticastAddress()) { java.net.SocketPermission( (p.getAddress()).getHostAddress(), "accept,connect") } else { port = p.getPort(); host = p.getAddress().getHostAddress(); if (port == -1) java.net.SocketPermission "{host}","resolve"; else java.net.SocketPermission "{host}:{port}","connect" }

java.net.InetAddress
  public String getHostName()
  public static InetAddress[]
                  getAllByName(String host)
  public static InetAddress getLocalHost()

java.net.DatagramSocket
  public InetAddress getLocalAddress()

java.net.ServerSocket
  ServerSocket(...)

java.net.DatagramSocket
  DatagramSocket(...)

java.net.MulticastSocket
  MulticastSocket(...)

java.net.ServerSocket
  public Socket accept()
  protected final void implAccept(Socket s)

java.net.ServerSocket
  public static synchronized void
      setSocketFactory(...)

java.net.Socket
  public static synchronized void
      setSocketImplFactory(...)

java.net.URL
  public static synchronized void
      setURLStreamHandlerFactory(...)

 java.net.URLConnection
   public static synchronized void
      setContentHandlerFactory(...)
   public static void
      setFileNameMap(FileNameMap map)

java.net.HttpURLConnection
   public static void
       setFollowRedirects(boolean set)

java.rmi.activation.ActivationGroup
  public static synchronized
        ActivationGroup createGroup(...)
  public static synchronized void
      setSystem(ActivationSystem system)

java.rmi.server.RMISocketFactory
   public synchronized static void
      setSocketFactory(...)

java.net.Socket
  Socket(...)

java.net.DatagramSocket
  public synchronized void
      receive(DatagramPacket p)

java.net.URL
  URL(...)

java.net.URLClassLoader
  URLClassLoader(...)

java.security.AccessControlContext
  public AccessControlContext(AccessControlContext acc,
                                DomainCombiner combiner)
  public DomainCombiner getDomainCombiner()

java.security.Identity
  public void addCertificate(...)

java.security.Identity
  public void removeCertificate(...)

java.security.Identity
  public void setInfo(String info)

java.security.Identity
  public void setPublicKey(PublicKey key)

java.security.Identity
  public String toString(...)

java.security.IdentityScope
  protected static void setSystemScope()

java.security.Permission
  public void checkGuard(Object object)

java.security.Policy
  public static Policy getPolicy()

java.security.Policy
  public static void
      setPolicy(Policy policy)

java.security.Policy
  public static Policy
      getInstance(String type, SpiParameter params)
      getInstance(String type, SpiParameter params, String provider)
      getInstance(String type, SpiParameter params, Provider provider)

java.security.Provider
  public synchronized void clear()

java.security.Provider
  public synchronized Object
      put(Object key, Object value)

java.security.Provider
  public synchronized Object
      remove(Object key)

java.security.SecureClassLoader
  SecureClassLoader(...)

java.security.Security
  public static void getProperty(String key)

java.security.Security
  public static int
      addProvider(Provider provider)
  public static int
      insertProviderAt(Provider provider,
                       int position);

java.security.Security
  public static void
      removeProvider(String name)

java.security.Security
  public static void
    setProperty(String key, String datum)

java.security.Signer
  public PrivateKey getPrivateKey()

java.security.Signer
  public final void
      setKeyPair(KeyPair pair)

java.sql.DriverManager
  public static synchronized void
      setLogWriter(PrintWriter out)

java.sql.DriverManager
  public static synchronized void
      setLogStream(PrintWriter out)

java.util.Locale
  public static synchronized void
            setDefault(Locale newLocale)

java.util.zip.ZipFile
  ZipFile(String name)

javax.security.auth.Subject
    public static Subject getSubject(final AccessControlContext acc)

javax.security.auth.Subject
    public void setReadOnly()

javax.security.auth.Subject
    public static Object doAs(final Subject subject,
                                final PrivilegedAction action)

javax.security.auth.Subject
    public static Object doAs(final Subject subject,
                                final PrivilegedExceptionAction action)
        throws java.security.PrivilegedActionException

javax.security.auth.Subject
    public static Object doAsPrivileged(final Subject subject,
                                final PrivilegedAction action,
                                final AccessControlContext acc)

javax.security.auth.Subject
    public static Object doAsPrivileged(final Subject subject,
                                final PrivilegedExceptionAction action,
                                final AccessControlContext acc)
        throws java.security.PrivilegedActionException

javax.security.auth.SubjectDomainCombiner
    public Subject getSubject()

javax.security.auth.SubjectDomainCombiner
    public Subject getSubject()

javax.security.auth.login.LoginContext
    public LoginContext(String name)
        throws LoginException

javax.security.auth.login.LoginContext
    public LoginContext(String name,
                        Subject subject)
         throws LoginException

javax.security.auth.login.LoginContext
    public LoginContext(String name,
                        CallbackHandler callbackHandler)
         throws LoginException

javax.security.auth.login.LoginContext
    public LoginContext(String name,
                        Subject subject,
                        CallbackHandler callbackHandler)
         throws LoginException

javax.security.auth.login.Configuration
    public static Configuration getConfiguration()

javax.security.auth.login.Configuration
    public static void setConfiguration(Configuration configuration)

javax.security.auth.login.Configuration
    public static void refresh()

javax.security.auth.login.Configuration
  public static Configuration
      getInstance(String type, SpiParameter params)
      getInstance(String type, SpiParameter params, String provider)
      getInstance(String type, SpiParameter params, Provider provider)

if (which != Member.PUBLIC) {
  if (currentClassLoader() != clazz.getClassLoader()) {
    checkPermission(
      new java.lang.RuntimePermission("accessDeclaredMembers"));
  }
}

このシステム・プロパティは、FilePermissionオブジェクトでのパス名正規化を有効または無効にするために使用できます。

• FilePermissionパス名正規化を無効にするには、jdk.io.permissionsUseCanonicalPath=falseと設定します。

• FilePermissionパス名正規化を有効にするには、jdk.io.permissionsUseCanonicalPath=trueと設定します。

このシステム・プロパティは、サードパーティのPolicyの実装をサポートするように互換性レイヤーを拡張するために使用できます。

• このシステム・プロパティを無効にするには、jdk.security.filePermCompat=falseと設定します。

  相対パスのFilePermissionで、アプリケーションが、デフォルトPolicyプロバイダおよび制限付きdoPrivilegedメソッドの絶対パスを使用してファイルにアクセスできるようになります。

• サードパーティのPolicyの実装をサポートするように互換性レイヤーを拡張するには、jdk.security.filePermCompat=trueと設定します。

  相対パスのFilePermissionで、アプリケーションが、デフォルトPolicyプロバイダ、制限付きdoPrivilegedメソッド、およびサードパーティのPolicyの実装の絶対パスを使用してファイルにアクセスできるようになります。