com.massa.util.security

Class MRulesSecurityManagers

java.lang.Object

com.massa.util.security.MRulesSecurityManagers

public final class MRulesSecurityManagers
extends Object

Allows to register several security managers, in general one per module.
Each security manager is identified by its class name and can be registered once and only once. To be correctly secured, the manager's IMRulesSecurityManager.getImmutableInstance() is called and the result is registered.
Please note that MRules security managers do not aim at prohibiting actions to developers (for example reflection).
It allows developers to inspect instructions coming from external sources and restrict access to forbidden operations.
For example, the developer will always be able to use property framework to access everything, as this property framework relies on the JVM abilities which are anyways accessible to him. But, he will also be able to secure property accesses coming from untrusted sources, such as a ruleset configuration for instance.

Method Summary

Modifier and Type	Method and Description
static void	declare(IMRulesSecurityManager securityManager) Registers a new security manager.
static <T extends IMRulesSecurityManager> T	get(Class<T> securityManagerClass) Gets the security manager registered for this class.
static boolean	hasManager(Class<? extends IMRulesSecurityManager> securityManagerClass) Checks if a security manager is register for this class.
static boolean	remove(Class<? extends IMRulesSecurityManager> securityManagerClass) Unregisters a security manager.
static void	removeAll() Unregisters all security manager.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

declare

public static void declare(IMRulesSecurityManager securityManager)
                    throws MRulesSecurityException

Registers a new security manager.

Parameters:

securityManager - Security manager instance to register

Throws:

MRulesSecurityException - If this security manager already exists.

remove

public static boolean remove(Class<? extends IMRulesSecurityManager> securityManagerClass)

Unregisters a security manager.

Parameters:

securityManagerClass - Security manager class to unregister

Returns:

true if unregister is succesful, false otherwise (for instance if it was not registered)

removeAll

public static void removeAll()

Unregisters all security manager.

hasManager

public static boolean hasManager(Class<? extends IMRulesSecurityManager> securityManagerClass)

Checks if a security manager is register for this class.

get

public static <T extends IMRulesSecurityManager> T get(Class<T> securityManagerClass)
                                                throws MRulesSecurityException

Gets the security manager registered for this class.

Throws:

MRulesSecurityException - If not registered.