Examples of org.jboss.naming.JndiPermission

org.jboss.naming.JndiPermission
This class represents access to a path in the JNDI tree. A JndiPermission consists of a pathname and a set of actions valid for that pathname.
Pathname is the pathname of the file or directory granted the specified actions. A pathname that ends in "/*" indicates all the files and directories contained in that directory. A pathname that ends with "/-" indicates (recursively) all files and subdirectories contained in that directory. A pathname consisting of the special token "<<ALL BINDINGS>>" matches any file.
The actions to be granted are passed to the constructor in a string containing a list of one or more comma-separated keywords. The possible keywords are "bind", "rebind", "unbind", "lookup", "list", "listBindings", and "createSubcontext". Their meaning is defined as follows:

bind
Context.bind permission
rebind
Context.rebind permission
unbind
Context.unbind permission.
lookup
Context.lookup permission.
list
Context.list permission.
listBindings
Context.listBindings permission.
createSubcontext
Context.createSubcontext permission.

The actions string is converted to lowercase before processing.
Be careful when granting JndiPermissions. Think about the implications of granting read and especially write access to various files and directories. The "<<ALL BINDINGS>>" permission with write action is especially dangerous. This grants permission to write to the entire file system. One thing this effectively allows is replacement of the system binary, including the JVM runtime environment.
Please note: Code can always read a file from the same directory it's in (or a subdirectory of that directory); it does not need explicit permission to do so. @see java.security.Permission @see java.security.Permissions @see java.security.PermissionCollection @author Marianne Mueller @author Roland Schemers @author Scott.Stark@jboss.org @serial exclude @version $Revision: 81310 $

   {
      qsm.clearPerms();


      HashSet<JndiPermission> expectedPerms = new HashSet<JndiPermission>();
      // expected doOps() permissions
      expectedPerms.add(new JndiPermission("path1", "createSubcontext"));
      expectedPerms.add(new JndiPermission("path1", "lookup"));
      expectedPerms.add(new JndiPermission("path1", "list"));
      expectedPerms.add(new JndiPermission("path1", "listBindings"));
      expectedPerms.add(new JndiPermission("path1/x", "bind"));
      expectedPerms.add(new JndiPermission("path1/x", "rebind"));
      expectedPerms.add(new JndiPermission("path1/x", "unbind"));
      expectedPerms.add(new JndiPermission("path1", "unbind"));
      SecurityUtil.doOps(ctx);
      // expected doBadOps() permissions
      expectedPerms.add(new JndiPermission("path2", "createSubcontext"));
      expectedPerms.add(new JndiPermission("path1x", "createSubcontext"));
      expectedPerms.add(new JndiPermission("path1x", "rebind"));
      expectedPerms.add(new JndiPermission("path1x", "lookup"));
      expectedPerms.add(new JndiPermission("path1x", "list"));
      expectedPerms.add(new JndiPermission("path1x", "listBindings"));
      expectedPerms.add(new JndiPermission("path1x/x", "bind"));
      expectedPerms.add(new JndiPermission("path1x/x", "rebind"));
      expectedPerms.add(new JndiPermission("path1x", "unbind"));
      SecurityUtil.doBadOps(ctx, false);


      List<Permission> perms = qsm.getPerms();
      for(Permission p : perms)
      {

View Full Code Here

      super(name);
   }
   
   public void testBind()
   {
      JndiPermission any = new JndiPermission("<<ALL BINDINGS>>", "*");
      JndiPermission path1 = new JndiPermission("/path1/*", "bind");
      JndiPermission path1Recursive = new JndiPermission("/path1/-", "bind");


      assertTrue("<<ALL BINDINGS>> implies /path1;bind", any.implies(path1));
      assertTrue("<<ALL BINDINGS>> implies /path1;bind", any.implies(path1Recursive));
      JndiPermission p = new JndiPermission("/path1/", "bind");
      assertTrue(path1+" implies /path1/ bind", path1.implies(p));
      assertTrue(path1Recursive+" implies /path1/ bind", path1Recursive.implies(p));
      // A directory permission does not imply access to the unqualified path
      p = new JndiPermission("/path1", "bind");
      assertFalse(path1+" implies /path1;bind", path1.implies(p));
      assertFalse(path1Recursive+" implies /path1;bind", path1Recursive.implies(p));
      
   }

View Full Code Here

      assertEquals("*", JndiPermission.ALL_ACTION);
   }
   
   public void testBasicConstructorAllBindings() throws Exception
   {
      JndiPermission test = new JndiPermission(ALL_BINDINGS, JndiPermission.BIND_ACTION);
      assertEquals(ALL_BINDINGS, test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorSimplePathString() throws Exception
   {
      JndiPermission test = new JndiPermission("simple", JndiPermission.BIND_ACTION);
      assertEquals("simple", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

   }
   */
   
   public void testBasicConstructorHierarchcicalPathString() throws Exception
   {
      JndiPermission test = new JndiPermission("1/2/3", JndiPermission.BIND_ACTION);
      assertEquals("1/2/3", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorWildcardPathString() throws Exception
   {
      JndiPermission test = new JndiPermission("1/2/3/*", JndiPermission.BIND_ACTION);
      assertEquals("1/2/3/*", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorRecursivePathString() throws Exception
   {
      JndiPermission test = new JndiPermission("1/2/3/-", JndiPermission.BIND_ACTION);
      assertEquals("1/2/3/-", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorSimplePathName() throws Exception
   {
      JndiPermission test = new JndiPermission(new CompositeName("simple"), JndiPermission.BIND_ACTION);
      assertEquals("simple", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorHierarchcicalPathName() throws Exception
   {
      JndiPermission test = new JndiPermission(new CompositeName("1/2/3"), JndiPermission.BIND_ACTION);
      assertEquals("1/2/3", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }
   
   public void testBasicConstructorWildcardPathName() throws Exception
   {
      JndiPermission test = new JndiPermission(new CompositeName("1/2/3/*"), JndiPermission.BIND_ACTION);
      assertEquals("1/2/3/*", test.getName());
      assertEquals(JndiPermission.BIND_ACTION, test.getActions());
   }

View Full Code Here

0 1 2 3

TOP

Related Classes of org.jboss.naming.JndiPermission

org.jnp.server.NamingServer

org.jnp.test.JndiPermissionUnitTest

org.jnp.test.NamingMCUnitTest

org.jnp.test.NamingServerSecurityManagerUnitTest

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.