oracle.jbo.script

Class ExprSecurityPolicy

java.lang.Object

oracle.jbo.script.ExprSecurityPolicy

public class ExprSecurityPolicy
extends java.lang.Object

The base class which defines the methods called by the security infrastructure on untrusted expressions. Extending this class will extend the behavior of the security infrastructure, providing an opportunity for additional checks after mandatory security checks take place.

See Also:

DefaultExprSecurityPolicy

Constructor Summary

Constructors

Constructor and Description
ExprSecurityPolicy()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkConstructor(java.lang.Class clazz) Check if a given class can be constructed.
boolean	checkMethod(java.lang.Class clazz, java.lang.String method) Check if a given class has permission to execute a given method.
boolean	checkMethod(java.lang.Object object, java.lang.Object method, java.lang.Object args) Check if a given object can execute the given method with the given arguments.
boolean	checkProperty(java.lang.Object object, java.lang.String property, java.lang.Boolean readOnly) Check if a given property can be accessed on the given object.
boolean	checkScriptMethod(java.lang.Object object, java.lang.String functionName) Check if a given function can be invoked in the context of the given object.
long	getTimeout() Return the amount, in milliseconds, of the timeout for untrusted expressions.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ExprSecurityPolicy

public ExprSecurityPolicy()

Method Detail

checkMethod

public boolean checkMethod(java.lang.Object object,
                  java.lang.Object method,
                  java.lang.Object args)

Check if a given object can execute the given method with the given arguments. This method will only be called at runtime.

Parameters:

object - The object whose method will be called.

method - The name of the method to call.

args - A argument, or array of arguments, which will be used on the method.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkProperty

public boolean checkProperty(java.lang.Object object,
                    java.lang.String property,
                    java.lang.Boolean readOnly)

Check if a given property can be accessed on the given object. This method will only be called at runtime.

Parameters:

object - The object on which the property will act.

property - The property to be accessed.

readOnly - true if the property is used in a read context, false if called in a write context, or null if the context cannot be reliably determined.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkMethod

public boolean checkMethod(java.lang.Class clazz,
                  java.lang.String method)

Check if a given class has permission to execute a given method. This method may be called at design time, in addition to runtime.

Parameters:

clazz -

method -

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkConstructor

public boolean checkConstructor(java.lang.Class clazz)

Check if a given class can be constructed. This method may be called at design time, in addition to runtime.

Parameters:

clazz - The class to be constructed.

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

checkScriptMethod

public boolean checkScriptMethod(java.lang.Object object,
                        java.lang.String functionName)

Check if a given function can be invoked in the context of the given object. This method may be called at design time, in addition to runtime.

Parameters:

object - The context in which the function is invoked.

functionName - The invoked function's name

Returns:

true if checks pass, false (or a thrown exception) if checks fail.

getTimeout

public long getTimeout()

Return the amount, in milliseconds, of the timeout for untrusted expressions. A value less than one is "no timeout". The default method will return the value set in the adfm-config section of adf-config.

Returns:

time, in milliseconds, for a timeout