ajanta.security.acl
Class AclImpl

java.lang.Object
  |
  +--ajanta.security.acl.OwnerImpl
        |
        +--ajanta.security.acl.AclImpl

All Implemented Interfaces:

java.security.acl.Acl, java.security.acl.Owner, java.io.Serializable

public class AclImpl

extends OwnerImpl

implements java.security.acl.Acl, java.io.Serializable

AclImpl implements java.security.acl.Acl interface

See Also:

Acl, Serialized Form

Constructor Summary

AclImpl(java.security.Principal owner, java.lang.String name)
Constructs AclImp object

Method Summary

boolean	addEntry(java.security.Principal caller, java.security.acl.AclEntry entry) Adds an ACL entry to this ACL.
boolean	checkPermission(java.security.Principal principal, java.security.acl.Permission permission) Checks whether or not the specified principal has the specified permission.
java.util.Enumeration	entries() Returns an enumeration of the entries in this ACL.
java.lang.String	getName() Returns the name of this ACL.
java.util.Enumeration	getPermissions(java.security.Principal user) Returns an enumeration for the set of allowed permissions for the specified principal (representing an entity such as an individual or a group).
boolean	removeEntry(java.security.Principal caller, java.security.acl.AclEntry entry) Removes an ACL entry from this ACL.
void	setName(java.security.Principal caller, java.lang.String name) Sets the name of this ACL.
java.lang.String	toString() Returns a string representation of the ACL contents.

Methods inherited from class ajanta.security.acl.OwnerImpl

addOwner, deleteOwner, isOwner

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.security.acl.Owner

addOwner, deleteOwner, isOwner

Constructor Detail

AclImpl

public AclImpl(java.security.Principal owner,
               java.lang.String name)

Constructs AclImp object

Method Detail

setName

public void setName(java.security.Principal caller,
                    java.lang.String name)
             throws java.security.acl.NotOwnerException

Sets the name of this ACL.

Specified by:

setName in interface java.security.acl.Acl

Parameters:

caller - - the principal invoking this method. It must be an owner of this ACL.

name - - the name to be given to this ACL.

java.security.acl.NotOwnerException

getName

public java.lang.String getName()

Returns the name of this ACL.

Specified by:

getName in interface java.security.acl.Acl

Returns:

the name of this ACL.

addEntry

public boolean addEntry(java.security.Principal caller,
                        java.security.acl.AclEntry entry)
                 throws java.security.acl.NotOwnerException

Adds an ACL entry to this ACL. An entry associates a principal (e.g., an individual or a group) with a set of permissions. Each principal can have at most one positive ACL entry (specifying permissions to be granted to the principal) and one negative ACL entry (specifying permissions to be denied). If there is already an ACL entry of the same type (negative or positive) already in the ACL, false is returned.

Specified by:

addEntry in interface java.security.acl.Acl

Parameters:

caller - - the principal invoking this method. It must be an owner of this ACL.

entry - - the ACL entry to be added to this ACL.

Returns:

true on success, false if an entry of the same type (positive or negative) for the same principal is already present in this ACL.

Throws:

java.security.acl.NotOwnerException - if the caller principal is not an owner of this Acl.

removeEntry

public boolean removeEntry(java.security.Principal caller,
                           java.security.acl.AclEntry entry)
                    throws java.security.acl.NotOwnerException

Removes an ACL entry from this ACL.

Specified by:

removeEntry in interface java.security.acl.Acl

Parameters:

caller - - the principal invoking this method. It must be an owner of this ACL.

entry - - the ACL entry to be removed from this ACL.

Returns:

true on success, false if the entry is not part of this ACL.

Throws:

java.security.acl.NotOwnerException - if the caller principal is not an owner of this Acl.

getPermissions

public java.util.Enumeration getPermissions(java.security.Principal user)

Returns an enumeration for the set of allowed permissions for the specified principal (representing an entity such as an individual or a group). This set of allowed permissions is calculated as follows: -> If there is no entry in this Access Control List for the specified principal, an empty permission set is returned. -> Otherwise, the principal's group permission sets are determined. (A principal can belong to one or more groups, where a group is a group of principals, represented by the Group interface.) The group positive permission set is the union of all the positive permissions of each group that the principal belongs to. The group negative permission set is the union of all the negative permissions of each group that the principal belongs to. If there is a specific permission that occurs in both the positive permission set and the negative permission set, it is removed from both. The individual positive and negative permission sets are also determined. The positive permission set contains the permissions specified in the positive ACL entry (if any) for the principal. Similarly, the negative permission set contains the permissions specified in the negative ACL entry (if any) for the principal. The individual positive (or negative) permission set is considered to be null if there is not a positive (negative) ACL entry for the principal in this ACL. The set of permissions granted to the principal is then calculated using the simple rule that individual permissions always override the group permissions. That is, the principal's individual negative permission set (specific denial of permissions) overrides the group positive permission set, and the principal's individual positive permission set overrides the group negative permission set. Assume that the positive permission set of all the groups that the principal belongs to is g1 and the negative permission set of all the groups that the principal belongs to is g2. Also assume that the individual positive permission set for the principal is p1 and the individual negative permission set for the principal is p2. Then the resulting permissions that the principal is granted are (p1 + (g1 - p2)) - (p2 + (g2 - p1))

Specified by:

getPermissions in interface java.security.acl.Acl

Parameters:

user - - the principal whose permission set is to be returned.

Returns:

the permission set specifying the permissions the principal is allowed.

entries

public java.util.Enumeration entries()

Returns an enumeration of the entries in this ACL. Each element in the enumeration is of type AclEntry.

Specified by:

entries in interface java.security.acl.Acl

Returns:

an enumeration of the entries in this ACL.

checkPermission

public boolean checkPermission(java.security.Principal principal,
                               java.security.acl.Permission permission)

Checks whether or not the specified principal has the specified permission. it does, true is returned, otherwise false is returned. More specifically, thiis method checks whether the passed permission is a member of the allowed permission set of the specified principal. The allowed permission set is determined by the same algorithm as is used by the getPermissions method.

Specified by:

checkPermission in interface java.security.acl.Acl

Parameters:

principal - - the principal, assumed to be a valid authenticated Principal.

permission - - the permission to be checked for.

Returns:

true if the principal has the specified permission, false otherwise.

toString

public java.lang.String toString()

Returns a string representation of the ACL contents.

Specified by:

toString in interface java.security.acl.Acl

Overrides:

toString in class java.lang.Object

Returns:

a string representation of the ACL contents.