mirror of
https://github.com/openjdk/jdk.git
synced 2025-08-27 14:54:52 +02:00
8191138: Remove deprecated java.security.acl APIs
Reviewed-by: alanb, mchung
This commit is contained in:
Sean Mullan
parent
855e5f5282
commit
28479937ea
14 changed files with 1 additions and 851 deletions
|
|
@ -1,244 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
import java.util.Enumeration;
|
|
||||||
import java.security.Principal;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Interface representing an Access Control List (ACL). An Access
|
|
||||||
* Control List is a data structure used to guard access to
|
|
||||||
* resources.<p>
|
|
||||||
*
|
|
||||||
* An ACL can be thought of as a data structure with multiple ACL
|
|
||||||
* entries. Each ACL entry, of interface type AclEntry, contains a
|
|
||||||
* set of permissions associated with a particular principal. (A
|
|
||||||
* principal represents an entity such as an individual user or a
|
|
||||||
* group). Additionally, each ACL entry is specified as being either
|
|
||||||
* positive or negative. If positive, the permissions are to be
|
|
||||||
* granted to the associated principal. If negative, the permissions
|
|
||||||
* are to be denied.<p>
|
|
||||||
*
|
|
||||||
* The ACL Entries in each ACL observe the following rules:
|
|
||||||
*
|
|
||||||
* <ul> <li>Each principal can have at most one positive ACL entry and
|
|
||||||
* one negative entry; that is, multiple positive or negative ACL
|
|
||||||
* entries are not allowed for any principal. Each entry specifies
|
|
||||||
* the set of permissions that are to be granted (if positive) or
|
|
||||||
* denied (if negative).
|
|
||||||
*
|
|
||||||
* <li>If there is no entry for a particular principal, then the
|
|
||||||
* principal is considered to have a null (empty) permission set.
|
|
||||||
*
|
|
||||||
* <li>If there is a positive entry that grants a principal a
|
|
||||||
* particular permission, and a negative entry that denies the
|
|
||||||
* principal the same permission, the result is as though the
|
|
||||||
* permission was never granted or denied.
|
|
||||||
*
|
|
||||||
* <li>Individual permissions always override permissions of the
|
|
||||||
* group(s) to which the individual belongs. That is, individual
|
|
||||||
* negative permissions (specific denial of permissions) override the
|
|
||||||
* groups' positive permissions. And individual positive permissions
|
|
||||||
* override the groups' negative permissions.
|
|
||||||
*
|
|
||||||
* </ul>
|
|
||||||
*
|
|
||||||
* The {@code java.security.acl } package provides the
|
|
||||||
* interfaces to the ACL and related data structures (ACL entries,
|
|
||||||
* groups, permissions, etc.).<p>
|
|
||||||
*
|
|
||||||
* The {@code java.security.acl.Acl } interface extends the
|
|
||||||
* {@code java.security.acl.Owner } interface. The Owner
|
|
||||||
* interface is used to maintain a list of owners for each ACL. Only
|
|
||||||
* owners are allowed to modify an ACL. For example, only an owner can
|
|
||||||
* call the ACL's {@code addEntry} method to add a new ACL entry
|
|
||||||
* to the ACL.
|
|
||||||
*
|
|
||||||
* @see java.security.acl.AclEntry
|
|
||||||
* @see java.security.acl.Owner
|
|
||||||
* @see java.security.acl.Acl#getPermissions
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
@SuppressWarnings("removal")
|
|
||||||
public interface Acl extends Owner {
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Sets the name of this ACL.
|
|
||||||
*
|
|
||||||
* @param caller the principal invoking this method. It must be an
|
|
||||||
* owner of this ACL.
|
|
||||||
*
|
|
||||||
* @param name the name to be given to this ACL.
|
|
||||||
*
|
|
||||||
* @exception NotOwnerException if the caller principal
|
|
||||||
* is not an owner of this ACL.
|
|
||||||
*
|
|
||||||
* @see #getName
|
|
||||||
*/
|
|
||||||
public void setName(Principal caller, String name)
|
|
||||||
throws NotOwnerException;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns the name of this ACL.
|
|
||||||
*
|
|
||||||
* @return the name of this ACL.
|
|
||||||
*
|
|
||||||
* @see #setName
|
|
||||||
*/
|
|
||||||
public String getName();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Adds an ACL entry to this ACL. An entry associates a principal
|
|
||||||
* (e.g., an individual or a group) with a set of
|
|
||||||
* permissions. Each principal can have at most one positive ACL
|
|
||||||
* entry (specifying permissions to be granted to the principal)
|
|
||||||
* and one negative ACL entry (specifying permissions to be
|
|
||||||
* denied). If there is already an ACL entry of the same type
|
|
||||||
* (negative or positive) already in the ACL, false is returned.
|
|
||||||
*
|
|
||||||
* @param caller the principal invoking this method. It must be an
|
|
||||||
* owner of this ACL.
|
|
||||||
*
|
|
||||||
* @param entry the ACL entry to be added to this ACL.
|
|
||||||
*
|
|
||||||
* @return true on success, false if an entry of the same type
|
|
||||||
* (positive or negative) for the same principal is already
|
|
||||||
* present in this ACL.
|
|
||||||
*
|
|
||||||
* @exception NotOwnerException if the caller principal
|
|
||||||
* is not an owner of this ACL.
|
|
||||||
*/
|
|
||||||
public boolean addEntry(Principal caller, AclEntry entry)
|
|
||||||
throws NotOwnerException;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Removes an ACL entry from this ACL.
|
|
||||||
*
|
|
||||||
* @param caller the principal invoking this method. It must be an
|
|
||||||
* owner of this ACL.
|
|
||||||
*
|
|
||||||
* @param entry the ACL entry to be removed from this ACL.
|
|
||||||
*
|
|
||||||
* @return true on success, false if the entry is not part of this ACL.
|
|
||||||
*
|
|
||||||
* @exception NotOwnerException if the caller principal is not
|
|
||||||
* an owner of this Acl.
|
|
||||||
*/
|
|
||||||
public boolean removeEntry(Principal caller, AclEntry entry)
|
|
||||||
throws NotOwnerException;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns an enumeration for the set of allowed permissions for the
|
|
||||||
* specified principal (representing an entity such as an individual or
|
|
||||||
* a group). This set of allowed permissions is calculated as
|
|
||||||
* follows:
|
|
||||||
*
|
|
||||||
* <ul>
|
|
||||||
*
|
|
||||||
* <li>If there is no entry in this Access Control List for the
|
|
||||||
* specified principal, an empty permission set is returned.
|
|
||||||
*
|
|
||||||
* <li>Otherwise, the principal's group permission sets are determined.
|
|
||||||
* (A principal can belong to one or more groups, where a group is a
|
|
||||||
* group of principals, represented by the Group interface.)
|
|
||||||
* The group positive permission set is the union of all
|
|
||||||
* the positive permissions of each group that the principal belongs to.
|
|
||||||
* The group negative permission set is the union of all
|
|
||||||
* the negative permissions of each group that the principal belongs to.
|
|
||||||
* If there is a specific permission that occurs in both
|
|
||||||
* the positive permission set and the negative permission set,
|
|
||||||
* it is removed from both.<p>
|
|
||||||
*
|
|
||||||
* The individual positive and negative permission sets are also
|
|
||||||
* determined. The positive permission set contains the permissions
|
|
||||||
* specified in the positive ACL entry (if any) for the principal.
|
|
||||||
* Similarly, the negative permission set contains the permissions
|
|
||||||
* specified in the negative ACL entry (if any) for the principal.
|
|
||||||
* The individual positive (or negative) permission set is considered
|
|
||||||
* to be null if there is not a positive (negative) ACL entry for the
|
|
||||||
* principal in this ACL.<p>
|
|
||||||
*
|
|
||||||
* The set of permissions granted to the principal is then calculated
|
|
||||||
* using the simple rule that individual permissions always override
|
|
||||||
* the group permissions. That is, the principal's individual negative
|
|
||||||
* permission set (specific denial of permissions) overrides the group
|
|
||||||
* positive permission set, and the principal's individual positive
|
|
||||||
* permission set overrides the group negative permission set.
|
|
||||||
*
|
|
||||||
* </ul>
|
|
||||||
*
|
|
||||||
* @param user the principal whose permission set is to be returned.
|
|
||||||
*
|
|
||||||
* @return the permission set specifying the permissions the principal
|
|
||||||
* is allowed.
|
|
||||||
*/
|
|
||||||
public Enumeration<Permission> getPermissions(Principal user);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns an enumeration of the entries in this ACL. Each element in
|
|
||||||
* the enumeration is of type AclEntry.
|
|
||||||
*
|
|
||||||
* @return an enumeration of the entries in this ACL.
|
|
||||||
*/
|
|
||||||
public Enumeration<AclEntry> entries();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Checks whether or not the specified principal has the specified
|
|
||||||
* permission. If it does, true is returned, otherwise false is returned.
|
|
||||||
*
|
|
||||||
* More specifically, this method checks whether the passed permission
|
|
||||||
* is a member of the allowed permission set of the specified principal.
|
|
||||||
* The allowed permission set is determined by the same algorithm as is
|
|
||||||
* used by the {@code getPermissions} method.
|
|
||||||
*
|
|
||||||
* @param principal the principal, assumed to be a valid authenticated
|
|
||||||
* Principal.
|
|
||||||
*
|
|
||||||
* @param permission the permission to be checked for.
|
|
||||||
*
|
|
||||||
* @return true if the principal has the specified permission, false
|
|
||||||
* otherwise.
|
|
||||||
*
|
|
||||||
* @see #getPermissions
|
|
||||||
*/
|
|
||||||
public boolean checkPermission(Principal principal, Permission permission);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns a string representation of the
|
|
||||||
* ACL contents.
|
|
||||||
*
|
|
||||||
* @return a string representation of the ACL contents.
|
|
||||||
*/
|
|
||||||
public String toString();
|
|
||||||
}
|
|
||||||
|
|
@ -1,161 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
import java.util.Enumeration;
|
|
||||||
import java.security.Principal;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This is the interface used for representing one entry in an Access
|
|
||||||
* Control List (ACL).<p>
|
|
||||||
*
|
|
||||||
* An ACL can be thought of as a data structure with multiple ACL entry
|
|
||||||
* objects. Each ACL entry object contains a set of permissions associated
|
|
||||||
* with a particular principal. (A principal represents an entity such as
|
|
||||||
* an individual user or a group). Additionally, each ACL entry is specified
|
|
||||||
* as being either positive or negative. If positive, the permissions are
|
|
||||||
* to be granted to the associated principal. If negative, the permissions
|
|
||||||
* are to be denied. Each principal can have at most one positive ACL entry
|
|
||||||
* and one negative entry; that is, multiple positive or negative ACL
|
|
||||||
* entries are not allowed for any principal.
|
|
||||||
*
|
|
||||||
* Note: ACL entries are by default positive. An entry becomes a
|
|
||||||
* negative entry only if the
|
|
||||||
* {@link #setNegativePermissions() setNegativePermissions}
|
|
||||||
* method is called on it.
|
|
||||||
*
|
|
||||||
* @see java.security.acl.Acl
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
@SuppressWarnings("removal")
|
|
||||||
public interface AclEntry extends Cloneable {
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Specifies the principal for which permissions are granted or denied
|
|
||||||
* by this ACL entry. If a principal was already set for this ACL entry,
|
|
||||||
* false is returned, otherwise true is returned.
|
|
||||||
*
|
|
||||||
* @param user the principal to be set for this entry.
|
|
||||||
*
|
|
||||||
* @return true if the principal is set, false if there was
|
|
||||||
* already a principal set for this entry.
|
|
||||||
*
|
|
||||||
* @see #getPrincipal
|
|
||||||
*/
|
|
||||||
public boolean setPrincipal(Principal user);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns the principal for which permissions are granted or denied by
|
|
||||||
* this ACL entry. Returns null if there is no principal set for this
|
|
||||||
* entry yet.
|
|
||||||
*
|
|
||||||
* @return the principal associated with this entry.
|
|
||||||
*
|
|
||||||
* @see #setPrincipal
|
|
||||||
*/
|
|
||||||
public Principal getPrincipal();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Sets this ACL entry to be a negative one. That is, the associated
|
|
||||||
* principal (e.g., a user or a group) will be denied the permission set
|
|
||||||
* specified in the entry.
|
|
||||||
*
|
|
||||||
* Note: ACL entries are by default positive. An entry becomes a
|
|
||||||
* negative entry only if this {@code setNegativePermissions}
|
|
||||||
* method is called on it.
|
|
||||||
*/
|
|
||||||
public void setNegativePermissions();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns true if this is a negative ACL entry (one denying the
|
|
||||||
* associated principal the set of permissions in the entry), false
|
|
||||||
* otherwise.
|
|
||||||
*
|
|
||||||
* @return true if this is a negative ACL entry, false if it's not.
|
|
||||||
*/
|
|
||||||
public boolean isNegative();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Adds the specified permission to this ACL entry. Note: An entry can
|
|
||||||
* have multiple permissions.
|
|
||||||
*
|
|
||||||
* @param permission the permission to be associated with
|
|
||||||
* the principal in this entry.
|
|
||||||
*
|
|
||||||
* @return true if the permission was added, false if the
|
|
||||||
* permission was already part of this entry's permission set.
|
|
||||||
*/
|
|
||||||
public boolean addPermission(Permission permission);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Removes the specified permission from this ACL entry.
|
|
||||||
*
|
|
||||||
* @param permission the permission to be removed from this entry.
|
|
||||||
*
|
|
||||||
* @return true if the permission is removed, false if the
|
|
||||||
* permission was not part of this entry's permission set.
|
|
||||||
*/
|
|
||||||
public boolean removePermission(Permission permission);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Checks if the specified permission is part of the
|
|
||||||
* permission set in this entry.
|
|
||||||
*
|
|
||||||
* @param permission the permission to be checked for.
|
|
||||||
*
|
|
||||||
* @return true if the permission is part of the
|
|
||||||
* permission set in this entry, false otherwise.
|
|
||||||
*/
|
|
||||||
public boolean checkPermission(Permission permission);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns an enumeration of the permissions in this ACL entry.
|
|
||||||
*
|
|
||||||
* @return an enumeration of the permissions in this ACL entry.
|
|
||||||
*/
|
|
||||||
public Enumeration<Permission> permissions();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns a string representation of the contents of this ACL entry.
|
|
||||||
*
|
|
||||||
* @return a string representation of the contents.
|
|
||||||
*/
|
|
||||||
public String toString();
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Clones this ACL entry.
|
|
||||||
*
|
|
||||||
* @return a clone of this ACL entry.
|
|
||||||
*/
|
|
||||||
public Object clone();
|
|
||||||
}
|
|
||||||
|
|
@ -1,50 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This is an exception that is thrown whenever a reference is made to a
|
|
||||||
* non-existent ACL (Access Control List).
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
public class AclNotFoundException extends Exception {
|
|
||||||
|
|
||||||
private static final long serialVersionUID = 5684295034092681791L;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Constructs an AclNotFoundException.
|
|
||||||
*/
|
|
||||||
public AclNotFoundException() {
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
@ -1,93 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
import java.util.Enumeration;
|
|
||||||
import java.security.Principal;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This interface is used to represent a group of principals. (A principal
|
|
||||||
* represents an entity such as an individual user or a company). <p>
|
|
||||||
*
|
|
||||||
* Note that Group extends Principal. Thus, either a Principal or a Group can
|
|
||||||
* be passed as an argument to methods containing a Principal parameter. For
|
|
||||||
* example, you can add either a Principal or a Group to a Group object by
|
|
||||||
* calling the object's {@code addMember} method, passing it the
|
|
||||||
* Principal or Group.
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
public interface Group extends Principal {
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Adds the specified member to the group.
|
|
||||||
*
|
|
||||||
* @param user the principal to add to this group.
|
|
||||||
*
|
|
||||||
* @return true if the member was successfully added,
|
|
||||||
* false if the principal was already a member.
|
|
||||||
*/
|
|
||||||
public boolean addMember(Principal user);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Removes the specified member from the group.
|
|
||||||
*
|
|
||||||
* @param user the principal to remove from this group.
|
|
||||||
*
|
|
||||||
* @return true if the principal was removed, or
|
|
||||||
* false if the principal was not a member.
|
|
||||||
*/
|
|
||||||
public boolean removeMember(Principal user);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns true if the passed principal is a member of the group.
|
|
||||||
* This method does a recursive search, so if a principal belongs to a
|
|
||||||
* group which is a member of this group, true is returned.
|
|
||||||
*
|
|
||||||
* @param member the principal whose membership is to be checked.
|
|
||||||
*
|
|
||||||
* @return true if the principal is a member of this group,
|
|
||||||
* false otherwise.
|
|
||||||
*/
|
|
||||||
public boolean isMember(Principal member);
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns an enumeration of the members in the group.
|
|
||||||
* The returned objects can be instances of either Principal
|
|
||||||
* or Group (which is a subclass of Principal).
|
|
||||||
*
|
|
||||||
* @return an enumeration of the group members.
|
|
||||||
*/
|
|
||||||
public Enumeration<? extends Principal> members();
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
@ -1,51 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This is an exception that is thrown whenever an attempt is made to delete
|
|
||||||
* the last owner of an Access Control List.
|
|
||||||
*
|
|
||||||
* @see java.security.acl.Owner#deleteOwner
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
public class LastOwnerException extends Exception {
|
|
||||||
|
|
||||||
private static final long serialVersionUID = -5141997548211140359L;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Constructs a LastOwnerException.
|
|
||||||
*/
|
|
||||||
public LastOwnerException() {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,50 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This is an exception that is thrown whenever the modification of an object
|
|
||||||
* (such as an Access Control List) is only allowed to be done by an owner of
|
|
||||||
* the object, but the Principal attempting the modification is not an owner.
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
public class NotOwnerException extends Exception {
|
|
||||||
|
|
||||||
private static final long serialVersionUID = -5555597911163362399L;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Constructs a NotOwnerException.
|
|
||||||
*/
|
|
||||||
public NotOwnerException() {
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,101 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
import java.security.Principal;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Interface for managing owners of Access Control Lists (ACLs) or ACL
|
|
||||||
* configurations. (Note that the Acl interface in the
|
|
||||||
* {@code java.security.acl} package extends this Owner
|
|
||||||
* interface.) The initial owner Principal should be specified as an
|
|
||||||
* argument to the constructor of the class implementing this interface.
|
|
||||||
*
|
|
||||||
* @since 1.1
|
|
||||||
* @see java.security.acl.Acl
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
@SuppressWarnings("removal")
|
|
||||||
public interface Owner {
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Adds an owner. Only owners can modify ACL contents. The caller
|
|
||||||
* principal must be an owner of the ACL in order to invoke this method.
|
|
||||||
* That is, only an owner can add another owner. The initial owner is
|
|
||||||
* configured at ACL construction time.
|
|
||||||
*
|
|
||||||
* @param caller the principal invoking this method. It must be an owner
|
|
||||||
* of the ACL.
|
|
||||||
*
|
|
||||||
* @param owner the owner that should be added to the list of owners.
|
|
||||||
*
|
|
||||||
* @return true if successful, false if owner is already an owner.
|
|
||||||
* @exception NotOwnerException if the caller principal is not an owner
|
|
||||||
* of the ACL.
|
|
||||||
*/
|
|
||||||
public boolean addOwner(Principal caller, Principal owner)
|
|
||||||
throws NotOwnerException;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Deletes an owner. If this is the last owner in the ACL, an exception is
|
|
||||||
* raised.<p>
|
|
||||||
*
|
|
||||||
* The caller principal must be an owner of the ACL in order to invoke
|
|
||||||
* this method.
|
|
||||||
*
|
|
||||||
* @param caller the principal invoking this method. It must be an owner
|
|
||||||
* of the ACL.
|
|
||||||
*
|
|
||||||
* @param owner the owner to be removed from the list of owners.
|
|
||||||
*
|
|
||||||
* @return true if the owner is removed, false if the owner is not part
|
|
||||||
* of the list of owners.
|
|
||||||
*
|
|
||||||
* @exception NotOwnerException if the caller principal is not an owner
|
|
||||||
* of the ACL.
|
|
||||||
*
|
|
||||||
* @exception LastOwnerException if there is only one owner left, so that
|
|
||||||
* deleteOwner would leave the ACL owner-less.
|
|
||||||
*/
|
|
||||||
public boolean deleteOwner(Principal caller, Principal owner)
|
|
||||||
throws NotOwnerException, LastOwnerException;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns true if the given principal is an owner of the ACL.
|
|
||||||
*
|
|
||||||
* @param owner the principal to be checked to determine whether or not
|
|
||||||
* it is an owner.
|
|
||||||
*
|
|
||||||
* @return true if the passed principal is in the list of owners, false
|
|
||||||
* if not.
|
|
||||||
*/
|
|
||||||
public boolean isOwner(Principal owner);
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
@ -1,60 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1996, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* This interface represents a permission, such as that used to grant
|
|
||||||
* a particular type of access to a resource.
|
|
||||||
*
|
|
||||||
* @author Satish Dharmaraj
|
|
||||||
* @since 1.1
|
|
||||||
*
|
|
||||||
* @deprecated This class is deprecated and subject to removal in a future
|
|
||||||
* version of Java SE. It has been replaced by {@code java.security.Policy}
|
|
||||||
* and related classes since 1.2.
|
|
||||||
*/
|
|
||||||
@Deprecated(since="9", forRemoval=true)
|
|
||||||
public interface Permission {
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Returns true if the object passed matches the permission represented
|
|
||||||
* in this interface.
|
|
||||||
*
|
|
||||||
* @param another the Permission object to compare with.
|
|
||||||
*
|
|
||||||
* @return true if the Permission objects are equal, false otherwise
|
|
||||||
*/
|
|
||||||
public boolean equals(Object another);
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Prints a string representation of this permission.
|
|
||||||
*
|
|
||||||
* @return the string representation of the permission.
|
|
||||||
*/
|
|
||||||
public String toString();
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
@ -1,35 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright (c) 1998, 2017, Oracle and/or its affiliates. All rights reserved.
|
|
||||||
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
||||||
*
|
|
||||||
* This code is free software; you can redistribute it and/or modify it
|
|
||||||
* under the terms of the GNU General Public License version 2 only, as
|
|
||||||
* published by the Free Software Foundation. Oracle designates this
|
|
||||||
* particular file as subject to the "Classpath" exception as provided
|
|
||||||
* by Oracle in the LICENSE file that accompanied this code.
|
|
||||||
*
|
|
||||||
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
||||||
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
||||||
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
||||||
* version 2 for more details (a copy is included in the LICENSE file that
|
|
||||||
* accompanied this code).
|
|
||||||
*
|
|
||||||
* You should have received a copy of the GNU General Public License version
|
|
||||||
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
||||||
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
*
|
|
||||||
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
||||||
* or visit www.oracle.com if you need additional information or have any
|
|
||||||
* questions.
|
|
||||||
*/
|
|
||||||
|
|
||||||
/**
|
|
||||||
* The classes and interfaces in this package have been deprecated. New
|
|
||||||
* classes should not be added to this package. The {@code java.security}
|
|
||||||
* package contains suitable replacements. See {@link java.security.Policy}
|
|
||||||
* and related classes for details. This package is subject to removal in a
|
|
||||||
* future version of Java SE.
|
|
||||||
*
|
|
||||||
* @since 1.1
|
|
||||||
*/
|
|
||||||
package java.security.acl;
|
|
||||||
|
|
@ -96,7 +96,6 @@ module java.base {
|
||||||
exports java.nio.file.attribute;
|
exports java.nio.file.attribute;
|
||||||
exports java.nio.file.spi;
|
exports java.nio.file.spi;
|
||||||
exports java.security;
|
exports java.security;
|
||||||
exports java.security.acl;
|
|
||||||
exports java.security.cert;
|
exports java.security.cert;
|
||||||
exports java.security.interfaces;
|
exports java.security.interfaces;
|
||||||
exports java.security.spec;
|
exports java.security.spec;
|
||||||
|
|
|
||||||
|
|
@ -1,5 +1,5 @@
|
||||||
#
|
#
|
||||||
# Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
|
# Copyright (c) 2016, 2019, Oracle and/or its affiliates. All rights reserved.
|
||||||
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
# DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
||||||
#
|
#
|
||||||
# This code is free software; you can redistribute it and/or modify it
|
# This code is free software; you can redistribute it and/or modify it
|
||||||
|
|
@ -500,7 +500,6 @@ java.rmi.dgc.*: compact2
|
||||||
java.rmi.registry.*: compact2
|
java.rmi.registry.*: compact2
|
||||||
java.rmi.server.*: compact2
|
java.rmi.server.*: compact2
|
||||||
java.security.*: compact1
|
java.security.*: compact1
|
||||||
java.security.acl.*: compact1
|
|
||||||
java.security.cert.*: compact1
|
java.security.cert.*: compact1
|
||||||
java.security.interfaces.*: compact1
|
java.security.interfaces.*: compact1
|
||||||
java.security.spec.*: compact1
|
java.security.spec.*: compact1
|
||||||
|
|
|
||||||
|
|
@ -30,7 +30,6 @@ java.rmi.dgc
|
||||||
java.rmi.registry
|
java.rmi.registry
|
||||||
java.rmi.server
|
java.rmi.server
|
||||||
java.security
|
java.security
|
||||||
java.security.acl
|
|
||||||
java.security.cert
|
java.security.cert
|
||||||
java.security.interfaces
|
java.security.interfaces
|
||||||
java.security.spec
|
java.security.spec
|
||||||
|
|
|
||||||
|
|
@ -30,7 +30,6 @@ java.rmi.dgc
|
||||||
java.rmi.registry
|
java.rmi.registry
|
||||||
java.rmi.server
|
java.rmi.server
|
||||||
java.security
|
java.security
|
||||||
java.security.acl
|
|
||||||
java.security.cert
|
java.security.cert
|
||||||
java.security.interfaces
|
java.security.interfaces
|
||||||
java.security.spec
|
java.security.spec
|
||||||
|
|
|
||||||
|
|
@ -20,7 +20,6 @@ java.nio.file
|
||||||
java.nio.file.attribute
|
java.nio.file.attribute
|
||||||
java.nio.file.spi
|
java.nio.file.spi
|
||||||
java.security
|
java.security
|
||||||
java.security.acl
|
|
||||||
java.security.cert
|
java.security.cert
|
||||||
java.security.interfaces
|
java.security.interfaces
|
||||||
java.security.spec
|
java.security.spec
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue