API java : Acl

java.security.acl
Interface Acl

All Superinterfaces:: Owner

public interface Acl
extends Owner
extends Owner

Interface representing an Access Control List (ACL). An Access Control List is a data structure used to guard access to resources.

An ACL can be thought of as a data structure with multiple ACL entries. Each ACL entry, of interface type AclEntry, contains a set of permissions associated with a particular principal. (A principal represents an entity such as an individual user or a group). Additionally, each ACL entry is specified as being either positive or negative. If positive, the permissions are to be granted to the associated principal. If negative, the permissions are to be denied.

The ACL Entries in each ACL observe the following rules:

Each principal can have at most one positive ACL entry and one negative entry; that is, multiple positive or negative ACL entries are not allowed for any principal. Each entry specifies the set of permissions that are to be granted (if positive) or denied (if negative).
If there is no entry for a particular principal, then the principal is considered to have a null (empty) permission set.
If there is a positive entry that grants a principal a particular permission, and a negative entry that denies the principal the same permission, the result is as though the permission was never granted or denied.
Individual permissions always override permissions of the group(s) to which the individual belongs. That is, individual negative permissions (specific denial of permissions) override the groups' positive permissions. And individual positive permissions override the groups' negative permissions.

The java.security.acl package provides the interfaces to the ACL and related data structures (ACL entries, groups, permissions, etc.), and the sun.security.acl classes provide a default implementation of the interfaces. For example, java.security.acl.Acl provides the interface to an ACL and the sun.security.acl.AclImpl class provides the default implementation of the interface.

The java.security.acl.Acl interface extends the java.security.acl.Owner interface. The Owner interface is used to maintain a list of owners for each ACL. Only owners are allowed to modify an ACL. For example, only an owner can call the ACL's addEntry method to add a new ACL entry to the ACL.

See Also:: AclEntry, Owner, getPermissions(java.security.Principal)

Method Summary

boolean addEntry(Principal caller, AclEntry entry)
          Adds an ACL entry to this ACL.

boolean checkPermission(Principal principal, Permission permission)
          Checks whether or not the specified principal has the specified permission.

Enumeration<AclEntry> entries()
          Returns an enumeration of the entries in this ACL.

String getName()
          Returns the name of this ACL.

Enumeration<Permission> getPermissions(Principal user)
          Returns an enumeration for the set of allowed permissions for the specified principal (representing an entity such as an individual or a group).

boolean removeEntry(Principal caller, AclEntry entry)
          Removes an ACL entry from this ACL.

void setName(Principal caller, String name)
          Sets the name of this ACL.

String toString()
          Returns a string representation of the ACL contents.

Methods inherited from interface java.security.acl.Owner

addOwner, deleteOwner, isOwner

Method Summary
`boolean`	`addEntry(Principal caller, AclEntry entry)` Adds an ACL entry to this ACL.
`boolean`	`checkPermission(Principal principal, Permission permission)` Checks whether or not the specified principal has the specified permission.
`Enumeration<AclEntry>`	`entries()` Returns an enumeration of the entries in this ACL.
`String`	`getName()` Returns the name of this ACL.
`Enumeration<Permission>`	`getPermissions(Principal user)` Returns an enumeration for the set of allowed permissions for the specified principal (representing an entity such as an individual or a group).
`boolean`	`removeEntry(Principal caller, AclEntry entry)` Removes an ACL entry from this ACL.
`void`	`setName(Principal caller, String name)` Sets the name of this ACL.
`String`	`toString()` Returns a string representation of the ACL contents.

Methods inherited from interface java.security.acl.Owner
`addOwner, deleteOwner, isOwner`

Method Detail

setName

void setName(Principal caller,
             String name)
             throws NotOwnerException

Sets the name of this ACL.

Parameters:: caller - the principal invoking this method. It must be an owner of this ACL.; name - the name to be given to this ACL.
Throws:: NotOwnerException - if the caller principal is not an owner of this ACL.
See Also:: getName()

getName

String getName()

Returns the name of this ACL.

Returns:: the name of this ACL.
See Also:: setName(java.security.Principal, java.lang.String)

addEntry

boolean addEntry(Principal caller,
                 AclEntry entry)
                 throws NotOwnerException

Adds an ACL entry to this ACL. An entry associates a principal (e.g., an individual or a group) with a set of permissions. Each principal can have at most one positive ACL entry (specifying permissions to be granted to the principal) and one negative ACL entry (specifying permissions to be denied). If there is already an ACL entry of the same type (negative or positive) already in the ACL, false is returned.

Parameters:: caller - the principal invoking this method. It must be an owner of this ACL.; entry - the ACL entry to be added to this ACL.
Returns:: true on success, false if an entry of the same type (positive or negative) for the same principal is already present in this ACL.
Throws:: NotOwnerException - if the caller principal is not an owner of this ACL.

removeEntry

boolean removeEntry(Principal caller,
                    AclEntry entry)
                    throws NotOwnerException

Removes an ACL entry from this ACL.

Parameters:: caller - the principal invoking this method. It must be an owner of this ACL.; entry - the ACL entry to be removed from this ACL.
Returns:: true on success, false if the entry is not part of this ACL.
Throws:: NotOwnerException - if the caller principal is not an owner of this Acl.

getPermissions

Enumeration<Permission> getPermissions(Principal user)

Returns an enumeration for the set of allowed permissions for the specified principal (representing an entity such as an individual or a group). This set of allowed permissions is calculated as follows:

If there is no entry in this Access Control List for the specified principal, an empty permission set is returned.
Otherwise, the principal's group permission sets are determined. (A principal can belong to one or more groups, where a group is a group of principals, represented by the Group interface.) The group positive permission set is the union of all the positive permissions of each group that the principal belongs to. The group negative permission set is the union of all the negative permissions of each group that the principal belongs to. If there is a specific permission that occurs in both the positive permission set and the negative permission set, it is removed from both.
The individual positive and negative permission sets are also determined. The positive permission set contains the permissions specified in the positive ACL entry (if any) for the principal. Similarly, the negative permission set contains the permissions specified in the negative ACL entry (if any) for the principal. The individual positive (or negative) permission set is considered to be null if there is not a positive (negative) ACL entry for the principal in this ACL.
The set of permissions granted to the principal is then calculated using the simple rule that individual permissions always override the group permissions. That is, the principal's individual negative permission set (specific denial of permissions) overrides the group positive permission set, and the principal's individual positive permission set overrides the group negative permission set.

Parameters:: user - the principal whose permission set is to be returned.
Returns:: the permission set specifying the permissions the principal is allowed.

entries

Enumeration<AclEntry> entries()

Returns an enumeration of the entries in this ACL. Each element in the enumeration is of type AclEntry.

Returns:: an enumeration of the entries in this ACL.

checkPermission

boolean checkPermission(Principal principal,
                        Permission permission)

Checks whether or not the specified principal has the specified permission. If it does, true is returned, otherwise false is returned. More specifically, this method checks whether the passed permission is a member of the allowed permission set of the specified principal. The allowed permission set is determined by the same algorithm as is used by the getPermissions method.

Parameters:: principal - the principal, assumed to be a valid authenticated Principal.; permission - the permission to be checked for.
Returns:: true if the principal has the specified permission, false otherwise.
See Also:: getPermissions(java.security.Principal)

toString

String toString()

Returns a string representation of the ACL contents.

Overrides:: toString in class Object

Returns:: a string representation of the ACL contents.

Package :

Ces informations proviennent du site de http://java.sun.com

Remarques

Contenu

Le contenu de cette page provient du site de Sun, et est généré depuis un cache sur l'infobrol après certains traitements automatisés. La présentation peut donc différer du document original, mais le contenu aussi. Vous pouvez utiliser ce bouton pour afficher la page originale du site de Sun :

Quels sont les motivations de cette démarche?

Maintenir les pages en cache sur différents sites peut offrir plus de disponibilité.

Chaque page est indexée dans la base de donnée, ce qui permet de retrouver facilement les informations, au moyen des sommaires, du moteur de recherche interne, etc.

Des facilités sont mises en place pour que les membres de l'infobrol puissent effectuer des traductions en français des différents documents. Ceci devrait permettre aux débutants en programmation Java de consulter les API en français s'ils maîtrisent moins bien la langue de Shakespeare. Dans le cas où une traduction a été soumise, elle est disponible au moyen d'un lien en bas de page. Si la traduction a été validée, la page s'affiche par défaut en français, et un lien en bas de page permet d'atteindre la version en anglais.

Le code sur l'infobrol est automatiquement coloré selon la syntaxe, et les différents mots clés sont transformés en liens pour accéder rapidement aux informations.

Vous avez la possibilité de partager vos expériences en proposant vos propres extraits de code en utilisant le bouton "ajouter un commentaire" en bas de page. Si vous visitez simplement l'infobrol, vous avez déjà accès à cette fonction, mais si vous étes membre du brol, vous pouvez en plus utiliser des boutons supplémentaires de mise en forme, dont la coloration automatique de vos extraits de codes.

<- AccountException AclEntry ->

Réseaux sociaux

|Plus d'options...

Vous pouvez modifier vos préférences dans votre profil pour ne plus afficher les interactions avec les réseaux sociaux sur ces pages.

Nuage de mots clés

6 mots clés dont 0 définis manuellement (plus d'information...).

Avertissement

Cette page ne possède pas encore de mots clés manuels, ceci est donc un exemple automatique (les niveaux de pertinence sont fictifs, mais les liens sont valables). Pour tester le nuage avec une page qui contient des mots définis manuellement, vous pouvez cliquer ici.

Vous pouvez modifier vos préférences dans votre profil pour ne plus afficher le nuage de mots clés.

Structure du document

Réseaux sociaux
Nuage de mots clés
- Avertissement :

Astuce pour imprimer les couleurs des cellules de tableaux : http://www.gaudry.be/ast-rf-450.html

Aucun commentaire pour cette page

tection. Enregistrement IDDN n° 5329-1505
Document créé le 30/08/06 02:09, dernière modification le Vendredi 17 Juin 2011, 12:12
Source du document imprimé : http://www.gaudry.be/java-api-rf-java/security/acl/Acl.html Document affiché 2 fois ce mois de Juin.
St.Gaudry©07.01.02