JMS Courier for C++: java::lang::SecurityManager Class Reference

It allows an application to determine, before performing a possibly unsafe or sensitive operation, what the operation is and whether it is being attempted in a security context that allows the operation to be performed. The application can allow or disallow the operation.

The SecurityManager class contains many methods with names that begin with the word check. These methods are called by various methods in the Java libraries before those methods perform certain potentially sensitive operations. The invocation of such a check method typically looks like this:

                 SecurityManager security = System.getSecurityManager();
                 if (security != null) {
                     security.check<i>XXX</i>(argument, &nbsp;.&nbsp;.&nbsp;.&nbsp;);
                 }

The security manager is thereby given an opportunity to prevent completion of the operation by throwing an exception. A security manager routine simply returns if the operation is permitted, but throws a SecurityException if the operation is not permitted. The only exception to this convention is checkTopLevelWindow, which returns a boolean value.

The current security manager is set by the setSecurityManager method in class System. The current security manager is obtained by the getSecurityManager method.

The special method determines whether an access request indicated by a specified permission should be granted or denied. The default implementation calls

               AccessController.checkPermission(perm);

If a requested access is allowed, checkPermission returns quietly. If denied, a SecurityException is thrown.

As of Java 2 SDK v1.2, the default implementation of each of the other check methods in SecurityManager is to call the SecurityManager checkPermission method to determine if the calling thread has permission to perform the requested operation.

Note that the checkPermission method with just a single permission argument always performs security checks within the context of the currently executing thread. Sometimes a security check that should be made within a given context will actually need to be done from within a different context (for example, from within a worker thread). The getSecurityContext method and the checkPermission method that includes a context argument are provided for this situation. The getSecurityContext method returns a "snapshot" of the current calling context. (The default implementation returns an AccessControlContext object.) A sample call is the following:

               Object context = null;
               SecurityManager sm = System.getSecurityManager();
               if (sm != null) context = sm.getSecurityContext();

The checkPermission method that takes a context object in addition to a permission makes access decisions based on that context, rather than on that of the current execution thread. Code within a different context can thus call that method, passing the permission and the previously-saved context object. A sample call, using the SecurityManager sm obtained as in the previous example, is the following:

               if (sm != null) sm.checkPermission(permission, context);

Permissions fall into these categories: File, Socket, Net, Security, Runtime, Property, AWT, Reflect, and Serializable. The classes managing these various permission categories are java.io.FilePermission, java.net.SocketPermission, java.net.NetPermission, java.security.SecurityPermission, java.lang.RuntimePermission, java.util.PropertyPermission, java.awt.AWTPermission, java.lang.reflect.ReflectPermission, and java.io.SerializablePermission.

All but the first two (FilePermission and SocketPermission) are subclasses of java.security.BasicPermission, which itself is an abstract subclass of the top-level class for permissions, which is java.security.Permission. BasicPermission defines the functionality needed for all permissions that contain a name that follows the hierarchical property naming convention (for example, "exitVM", "setFactory", "queuePrintJob", etc). An asterisk may appear at the end of the name, following a ".", or by itself, to signify a wildcard match. For example: "a.*" or "*" is valid, "*a" or "a*b" is not valid.

FilePermission and SocketPermission are subclasses of the top-level class for permissions (java.security.Permission). Classes like these that have a more complicated name syntax than that used by BasicPermission subclass directly from Permission rather than from BasicPermission. For example, for a java.io.FilePermission object, the permission name is the path name of a file (or directory).

Some of the permission classes have an "actions" list that tells the actions that are permitted for the object. For example, for a java.io.FilePermission object, the actions list (such as "read, write") specifies which actions are granted for the specified file (or for files in the specified directory).

Other permission classes are for "named" permissions - ones that contain a name but no actions list; you either have the named permission or you don't.

Note: There is also a java.security.AllPermission permission that implies all permissions. It exists to simplify the work of system administrators who might need to perform multiple tasks that require all (or numerous) permissions.

See Permissions in the Java 2 SDK for permission-related information. This document includes, for example, a table listing the various SecurityManager check methods and the permission(s) the default implementation of each such method requires. It also contains a table of all the version 1.2 methods that require permissions, and for each such method tells which permission it requires.

For more information about SecurityManager changes made in the Java 2 SDK and advice regarding porting of 1.1-style security managers, see the security documentation.

Constructor & Destructor Documentation

java::lang::SecurityManager::SecurityManager	(	::xmog_dummy	_use_java_ctor,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)

Constructs a new SecurityManager.

If there is a security manager already installed, this method first calls the security manager's checkPermission method with the RuntimePermission("createSecurityManager") permission to ensure the calling thread has permission to create a new security manager. This may result in throwing a SecurityException.

Parameters:

	_use_java_ctor	indicates that you want to delegate to a Java constructor whose natural proxy conflicts with a C++ requirement.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Member Function Documentation

virtual void java::lang::SecurityManager::checkAccept	(	const ::java::lang::String &	host,
		jint	port,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not permitted to accept a socket connection from the specified host and port number.

This method is invoked for the current security manager by the accept method of class ServerSocket.

This method calls checkPermission with the SocketPermission(host+":"+port,"accept") permission.

If you override this method, then you should make a call to super.checkAccept at the point the overridden method would normally throw an exception.

Parameters:

	host	the host name of the socket connection.
	port	the port number of the socket connection.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkAwtEventQueueAccess	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access the AWT event queue.

This method calls checkPermission with the AWTPermission("accessEventQueue") permission.

If you override this method, then you should make a call to super.checkAwtEventQueueAccess at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkConnect	(	const ::java::lang::String &	host,
		jint	port,
		const ::java::lang::Object &	context,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the specified security context is not allowed to open a socket connection to the specified host and port number.

A port number of -1 indicates that the calling method is attempting to determine the IP address of the specified host name.

If context is not an instance of AccessControlContext then a SecurityException is thrown.

Otherwise, the port number is checked. If it is not equal to -1, the context's checkPermission method is called with a SocketPermission(host+":"+port,"connect") permission. If the port is equal to -1, then the context's checkPermission method is called with a SocketPermission(host,"resolve") permission.

If you override this method, then you should make a call to super.checkConnect at the point the overridden method would normally throw an exception.

Parameters:

	host	the host name port to connect to.
	port	the protocol port to connect to.
	context	a system-dependent security context.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkConnect	(	const ::java::lang::String &	host,
		jint	port,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to open a socket connection to the specified host and port number.

A port number of -1 indicates that the calling method is attempting to determine the IP address of the specified host name.

This method calls checkPermission with the SocketPermission(host+":"+port,"connect") permission if the port is not equal to -1. If the port is equal to -1, then it calls checkPermission with the SocketPermission(host,"resolve") permission.

If you override this method, then you should make a call to super.checkConnect at the point the overridden method would normally throw an exception.

Parameters:

	host	the host name port to connect to.
	port	the protocol port to connect to.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkCreateClassLoader	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to create a new class loader.

This method calls checkPermission with the RuntimePermission("createClassLoader") permission.

If you override this method, then you should make a call to super.checkCreateClassLoader at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkDelete	(	const ::java::lang::String &	file,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to delete the specified file.

This method is invoked for the current security manager by the delete method of class File.

This method calls checkPermission with the FilePermission(file,"delete") permission.

If you override this method, then you should make a call to super.checkDelete at the point the overridden method would normally throw an exception.

Parameters:

	file	the system-dependent filename.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkExec	(	const ::java::lang::String &	cmd,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to create a subprocess.

This method is invoked for the current security manager by the exec methods of class Runtime.

This method calls checkPermission with the FilePermission(cmd,"execute") permission if cmd is an absolute path, otherwise it calls checkPermission with FilePermission("<<ALL FILES>>","execute").

If you override this method, then you should make a call to super.checkExec at the point the overridden method would normally throw an exception.

Parameters:

	cmd	the specified system command.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkExit	(	jint	status,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to cause the Java Virtual Machine to halt with the specified status code.

This method is invoked for the current security manager by the exit method of class Runtime. A status of 0 indicates success; other values indicate various errors.

This method calls checkPermission with the RuntimePermission("exitVM") permission.

If you override this method, then you should make a call to super.checkExit at the point the overridden method would normally throw an exception.

Parameters:

	status	the exit status.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkLink	(	const ::java::lang::String &	lib,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to dynamic link the library code specified by the string argument file.

The argument is either a simple library name or a complete filename.

This method is invoked for the current security manager by methods load and loadLibrary of class Runtime.

This method calls checkPermission with the RuntimePermission("loadLibrary."+lib) permission.

If you override this method, then you should make a call to super.checkLink at the point the overridden method would normally throw an exception.

Parameters:

	lib	the name of the library.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkListen	(	jint	port,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to wait for a connection request on the specified local port number.

If port is not 0, this method calls checkPermission with the SocketPermission("localhost:"+port,"listen"). If port is zero, this method calls checkPermission with SocketPermission("localhost:1024-","listen").

If you override this method, then you should make a call to super.checkListen at the point the overridden method would normally throw an exception.

Parameters:

	port	the local port.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkMemberAccess	(	const ::java::lang::Class &	clazz,
		jint	which,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access members.

The default policy is to allow access to PUBLIC members, as well as access to classes that have the same class loader as the caller. In all other cases, this method calls checkPermission with the RuntimePermission("accessDeclaredMembers") permission.

If this method is overridden, then a call to super.checkMemberAccess cannot be made, as the default implementation of checkMemberAccess relies on the code being checked being at a stack depth of 4.

Parameters:

	clazz	the class that reflection is to be performed on.
	which	type of access, PUBLIC or DECLARED.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkPackageAccess	(	const ::java::lang::String &	pkg,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access the package specified by the argument.

This method is used by the loadClass method of class loaders.

This method first gets a list of restricted packages by obtaining a comma-separated list from a call to java.security.Security.getProperty("package.access"), and checks to see if pkg starts with or equals any of the restricted packages. If it does, then checkPermission gets called with the RuntimePermission("accessClassInPackage."+pkg) permission.

If this method is overridden, then super.checkPackageAccess should be called as the first line in the overridden method.

Parameters:

	pkg	the package name.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkPackageDefinition	(	const ::java::lang::String &	pkg,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to define classes in the package specified by the argument.

This method is used by the loadClass method of some class loaders.

This method first gets a list of restricted packages by obtaining a comma-separated list from a call to java.security.Security.getProperty("package.definition"), and checks to see if pkg starts with or equals any of the restricted packages. If it does, then checkPermission gets called with the RuntimePermission("defineClassInPackage."+pkg) permission.

If this method is overridden, then super.checkPackageDefinition should be called as the first line in the overridden method.

Parameters:

	pkg	the package name.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkPrintJobAccess	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to initiate a print job request.

This method calls checkPermission with the RuntimePermission("queuePrintJob") permission.

If you override this method, then you should make a call to super.checkPrintJobAccess at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkPropertiesAccess	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access or modify the system properties.

This method is used by the getProperties and setProperties methods of class System.

This method calls checkPermission with the PropertyPermission("*", "read,write") permission.

If you override this method, then you should make a call to super.checkPropertiesAccess at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkPropertyAccess	(	const ::java::lang::String &	key,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access the system property with the specified key name.

This method is used by the getProperty method of class System.

This method calls checkPermission with the PropertyPermission(key, "read") permission.

If you override this method, then you should make a call to super.checkPropertyAccess at the point the overridden method would normally throw an exception.

Parameters:

	key	a system property key.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkRead	(	const ::java::lang::String &	file,
		const ::java::lang::Object &	context,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the specified security context is not allowed to read the file specified by the string argument.

The context must be a security context returned by a previous call to getSecurityContext.

If context is an instance of AccessControlContext then the AccessControlContext.checkPermission method will be invoked with the FilePermission(file,"read") permission.

If context is not an instance of AccessControlContext then a SecurityException is thrown.

If you override this method, then you should make a call to super.checkRead at the point the overridden method would normally throw an exception.

Parameters:

	file	the system-dependent filename.
	context	a system-dependent security context.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkRead	(	const ::java::lang::String &	file,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to read the file specified by the string argument.

This method calls checkPermission with the FilePermission(file,"read") permission.

If you override this method, then you should make a call to super.checkRead at the point the overridden method would normally throw an exception.

Parameters:

	file	the system-dependent file name.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkSecurityAccess	(	const ::java::lang::String &	target,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Determines whether the permission with the specified permission target name should be granted or denied.

If the requested permission is allowed, this method returns quietly. If denied, a SecurityException is raised.

This method creates a SecurityPermission object for the given permission target name and calls checkPermission with it.

See the documentation for for a list of possible permission target names.

If you override this method, then you should make a call to super.checkSecurityAccess at the point the overridden method would normally throw an exception.

Parameters:

	target	the target name of the `SecurityPermission`.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkSetFactory	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to set the socket factory used by ServerSocket or Socket, or the stream handler factory used by URL.

This method calls checkPermission with the RuntimePermission("setFactory") permission.

If you override this method, then you should make a call to super.checkSetFactory at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual void java::lang::SecurityManager::checkSystemClipboardAccess	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to access the system clipboard.

This method calls checkPermission with the AWTPermission("accessClipboard") permission.

If you override this method, then you should make a call to super.checkSystemClipboardAccess at the point the overridden method would normally throw an exception.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual bool java::lang::SecurityManager::checkTopLevelWindow	(	const ::java::lang::Object &	window,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Returns false if the calling thread is not trusted to bring up the top-level window indicated by the window argument.

In this case, the caller can still decide to show the window, but the window should include some sort of visual warning. If the method returns true, then the window can be shown without any special restrictions.

See class Window for more information on trusted and untrusted windows.

This method calls checkPermission with the AWTPermission("showWindowWithoutWarningBanner") permission, and returns true if a SecurityException is not thrown, otherwise it returns false.

If you override this method, then you should make a call to super.checkTopLevelWindow at the point the overridden method would normally return false, and the value of super.checkTopLevelWindow should be returned.

Parameters:

	window	the new window that is being created.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:: true if the calling thread is trusted to put up top-level windows; false otherwise.

virtual void java::lang::SecurityManager::checkWrite	(	const ::java::lang::String &	file,
		::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Throws a SecurityException if the calling thread is not allowed to write to the file specified by the string argument.

This method calls checkPermission with the FilePermission(file,"write") permission.

If you override this method, then you should make a call to super.checkWrite at the point the overridden method would normally throw an exception.

Parameters:

	file	the system-dependent filename.
	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:

virtual bool java::lang::SecurityManager::getInCheck	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)	`[virtual]`

Tests if there is a security check in progress.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:: the value of the inCheck field. This field should contain true if a security check is in progress, false otherwise.

virtual ::java::lang::Object java::lang::SecurityManager::getSecurityContext	(	::xmog_localenv *	p_xenv = `NULL`,
		xmog_flags	f_xflags = `xmogDefaultFlags`
	)

Creates an object that encapsulates the current execution environment.

The result of this method is used, for example, by the three-argument checkConnect method and by the two-argument checkRead method. These methods are needed because a trusted method may be called on to read a file or open a socket on behalf of another method. The trusted method needs to determine if the other (possibly untrusted) method would be allowed to perform the operation on its own.

The default implementation of this method is to return an AccessControlContext object.

Parameters:

	p_xenv	the local call environment. The default value is `NULL`.
	f_xflags	the flags that allow control over the reference type and other internal matters. The default value is xmog_base::GLOBAL.

Returns:: an implementation-dependent object that encapsulates sufficient information about the current execution environment to perform some security checks later.

java::lang::SecurityManager Class Reference

Public Types

Public Member Functions

Detailed Description

Constructor & Destructor Documentation

Member Function Documentation


Public Types
enum	{ xmogDefaultFlags = xmog_base::GLOBAL, xmogMajorVersion = 3, xmogMinorVersion = 2, xmogPatchVersion = 9, xmogBuildNumber = 2047 }
typedef ::xmog_java_array_template< ::java::lang::SecurityManager >	array1D
typedef ::xmog_java_array_template< ::xmog_java_array_template< ::java::lang::SecurityManager > >	array2D
Public Member Functions
virtual void	checkAccept (const ::java::lang::String &host, jint port,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not permitted to accept a socket connection from the specified host and port number.
virtual void	checkAwtEventQueueAccess (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access the AWT event queue.
virtual void	checkConnect (const ::java::lang::String &host, jint port, const ::java::lang::Object &context,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the specified security context is not allowed to open a socket connection to the specified host and port number.
virtual void	checkConnect (const ::java::lang::String &host, jint port,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to open a socket connection to the specified host and port number.
virtual void	checkCreateClassLoader (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to create a new class loader.
virtual void	checkDelete (const ::java::lang::String &file,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to delete the specified file.
virtual void	checkExec (const ::java::lang::String &cmd,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to create a subprocess.
virtual void	checkExit (jint status,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to cause the Java Virtual Machine to halt with the specified status code.
virtual void	checkLink (const ::java::lang::String &lib,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to dynamic link the library code specified by the string argument file.
virtual void	checkListen (jint port,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to wait for a connection request on the specified local port number.
virtual void	checkMemberAccess (const ::java::lang::Class &clazz, jint which,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access members.
virtual void	checkPackageAccess (const ::java::lang::String &pkg,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access the package specified by the argument.
virtual void	checkPackageDefinition (const ::java::lang::String &pkg,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to define classes in the package specified by the argument.
virtual void	checkPrintJobAccess (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to initiate a print job request.
virtual void	checkPropertiesAccess (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access or modify the system properties.
virtual void	checkPropertyAccess (const ::java::lang::String &key,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access the system property with the specified `key` name.
virtual void	checkRead (const ::java::lang::String &file, const ::java::lang::Object &context,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the specified security context is not allowed to read the file specified by the string argument.
virtual void	checkRead (const ::java::lang::String &file,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to read the file specified by the string argument.
virtual void	checkSecurityAccess (const ::java::lang::String &target,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Determines whether the permission with the specified permission target name should be granted or denied.
virtual void	checkSetFactory (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to set the socket factory used by `ServerSocket` or `Socket`, or the stream handler factory used by `URL`.
virtual void	checkSystemClipboardAccess (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to access the system clipboard.
virtual bool	checkTopLevelWindow (const ::java::lang::Object &window,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Returns `false` if the calling thread is not trusted to bring up the top-level window indicated by the `window` argument.
virtual void	checkWrite (const ::java::lang::String &file,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Throws a `SecurityException` if the calling thread is not allowed to write to the file specified by the string argument.
virtual bool	getInCheck (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Tests if there is a security check in progress.
virtual ::java::lang::Object	getSecurityContext (::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Creates an object that encapsulates the current execution environment.
	SecurityManager (::xmog_dummy _use_java_ctor,::xmog_localenv *p_xenv=NULL, xmog_flags f_xflags=xmogDefaultFlags)
	Constructs a new `SecurityManager`.