net.jini.security

Class Security.DistributedSubjectCombiner

java.lang.Object

javax.security.auth.SubjectDomainCombiner

net.jini.security.Security.DistributedSubjectCombiner

All Implemented Interfaces:

DomainCombiner

Enclosing class:

Security

private static class Security.DistributedSubjectCombiner
extends SubjectDomainCombiner

Extends and overrides SubjectDomainCombiner, to allow untrusted code to run as a Subject, without injecting Principals into the ProtectionDomain of untrusted code.

Since:

3.0.0

Field Summary

Fields

Modifier and Type	Field and Description
private Subject	subject

Constructor Summary

Constructors

Modifier	Constructor and Description
private	DistributedSubjectCombiner(Subject subject)

Method Summary

Modifier and Type	Method and Description
ProtectionDomain[]	combine(ProtectionDomain[] currentDomains, ProtectionDomain[] assignedDomains) Prepends one new SubjectDomain containing the Subject and Subject's Principals with a CodeSource that has a null URL and no signer Certificates.

Methods inherited from class javax.security.auth.SubjectDomainCombiner

getSubject

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

subject

private final Subject subject

Constructor Detail

DistributedSubjectCombiner

private DistributedSubjectCombiner(Subject subject)

Method Detail

combine

public ProtectionDomain[] combine(ProtectionDomain[] currentDomains,
                                  ProtectionDomain[] assignedDomains)

Prepends one new SubjectDomain containing the Subject and Subject's Principals with a CodeSource that has a null URL and no signer Certificates. Combines the current and assigned domains, removing any duplicates and any existing SubjectDomain. A new array is returned.

Specified by:

combine in interface DomainCombiner

Overrides:

combine in class SubjectDomainCombiner

Parameters:

currentDomains - the ProtectionDomains associated with the current execution Thread, up to the most recent privileged ProtectionDomain. The ProtectionDomains are are listed in order of execution, with the most recently executing ProtectionDomain residing at the beginning of the array. This parameter may be null if the current execution Thread has no associated ProtectionDomains.

assignedDomains - an array of inherited ProtectionDomains. ProtectionDomains may be inherited from a parent Thread, or from a privileged AccessControlContext. This parameter may be null if there are no inherited ProtectionDomains.

Returns:

a new array containing current and assigned domains with a new SubjectDomain prepended.