org.ringojs.security

Class RingoSecurityManager

java.lang.Object

java.lang.SecurityManager

org.mozilla.javascript.RhinoSecurityManager

org.ringojs.security.RingoSecurityManager

public class RingoSecurityManager
extends org.mozilla.javascript.RhinoSecurityManager

Field Summary

Fields

Modifier and Type	Field and Description
static Permission	ACCESS_DECLARED_MEMBERS
static Permission	ACCESS_JAVA
static Permission	GET_CLASSLOADER
static Permission	SPAWN_THREAD

Fields inherited from class java.lang.SecurityManager

inCheck

Constructor Summary

Constructors

Constructor and Description
RingoSecurityManager()

Method Summary

Modifier and Type	Method and Description
void	checkAccess(ThreadGroup g) The default security manager does not provide a way to keep code from starting threads.
void	checkJavaAccess() Check if the top-most application script has permission to access members of Java objects and classes.
void	checkMemberAccess(Class<?> clazz, int which) Override to decide on top-most application script class instead of java class.

Methods inherited from class org.mozilla.javascript.RhinoSecurityManager

getCurrentScriptClass

Methods inherited from class java.lang.SecurityManager

checkAccept, checkAccess, checkAwtEventQueueAccess, checkConnect, checkConnect, checkCreateClassLoader, checkDelete, checkExec, checkExit, checkLink, checkListen, checkMulticast, checkMulticast, checkPackageAccess, checkPackageDefinition, checkPermission, checkPermission, checkPrintJobAccess, checkPropertiesAccess, checkPropertyAccess, checkRead, checkRead, checkRead, checkSecurityAccess, checkSetFactory, checkSystemClipboardAccess, checkTopLevelWindow, checkWrite, checkWrite, classDepth, classLoaderDepth, currentClassLoader, currentLoadedClass, getClassContext, getInCheck, getSecurityContext, getThreadGroup, inClass, inClassLoader

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

GET_CLASSLOADER

public static final Permission GET_CLASSLOADER

ACCESS_DECLARED_MEMBERS

public static final Permission ACCESS_DECLARED_MEMBERS

ACCESS_JAVA

public static final Permission ACCESS_JAVA

SPAWN_THREAD

public static final Permission SPAWN_THREAD

Constructor Detail

RingoSecurityManager

public RingoSecurityManager()

Method Detail

checkAccess

public void checkAccess(ThreadGroup g)

The default security manager does not provide a way to keep code from starting threads. We overide this method to be able to do so by checking the modifyThreadGroup permission on all thread groups, not just the root group.

Overrides:

checkAccess in class SecurityManager

Parameters:

g - the threadgroup

checkMemberAccess

public void checkMemberAccess(Class<?> clazz,
                              int which)

Override to decide on top-most application script class instead of java class. This is currently not as useful as it should be because of Rhino's caching of reflection meta-data. Because of this, classes that have already been used by trusted code are accessible to untrusted code as well.

Overrides:

checkMemberAccess in class SecurityManager

Parameters:

clazz - the class that reflection is to be performed on.

which - type of access, PUBLIC or DECLARED.

Throws:

SecurityException - if the caller does not have permission to access members.

NullPointerException - if the clazz argument is null.

checkJavaAccess

public void checkJavaAccess()

Check if the top-most application script has permission to access members of Java objects and classes.

This checks if the script trying to access a java class or object has the accessEngine RingoRuntimePermission.

Throws:

SecurityException - if the caller does not have permission to access java classes.