com.delphix.masking.api.plugin.utils.security

Class CustomPolicy

java.lang.Object

java.security.Policy

com.delphix.masking.api.plugin.utils.security.CustomPolicy

public class CustomPolicy
extends java.security.Policy

Policy class that enforces our permissions. We use an allow list to evaluate FilePermissions and a denylist for all other permissions. That is to say, for FilePermissions we must explicitly decide what is allowed, whereas for all other permissions we allow everything except for those we explicitly deny.

Nested Class Summary

Nested classes/interfaces inherited from class java.security.Policy

java.security.Policy.Parameters

Field Summary

Fields inherited from class java.security.Policy

UNSUPPORTED_EMPTY_COLLECTION

Constructor Summary

Constructors

Constructor and Description
CustomPolicy()
CustomPolicy(java.util.List<java.lang.String> enforcementPaths, java.util.List<java.io.FilePermission> allowFilePerms, java.util.List<java.security.Permission> denyPermissions, java.util.Set<java.security.ProtectionDomain> ignoreDomains)

Method Summary

Modifier and Type	Method and Description
java.security.PermissionCollection	getPermissions(java.security.CodeSource codesource)
boolean	implies(java.security.ProtectionDomain domain, java.security.Permission permission)

Methods inherited from class java.security.Policy

getInstance, getInstance, getInstance, getParameters, getPermissions, getPolicy, getProvider, getType, refresh, setPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CustomPolicy

public CustomPolicy()

CustomPolicy

public CustomPolicy(java.util.List<java.lang.String> enforcementPaths,
                    java.util.List<java.io.FilePermission> allowFilePerms,
                    java.util.List<java.security.Permission> denyPermissions,
                    java.util.Set<java.security.ProtectionDomain> ignoreDomains)

Method Detail

getPermissions

public java.security.PermissionCollection getPermissions(java.security.CodeSource codesource)

Overrides:

getPermissions in class java.security.Policy

implies

public boolean implies(java.security.ProtectionDomain domain,
                       java.security.Permission permission)

Overrides:

implies in class java.security.Policy