JavaEE API 8.0.1 · javax.security.jacc.WebResourcePermission

Modifier and Type	Field and Description
private static final transient String	EMPTY_STRING
private static final transient String	ESCAPED_COLON
private transient int	hashCodeValue
private transient HttpMethodSpec	methodSpec
private static final ObjectStreamField[]	serialPersistentFields The serialized fields of this permission are defined below.
private static final long	serialVersionUID Hides java.security.Permission.serialVersionUID.
private transient URLPatternSpec	urlPatternSpec

Constructor Summary

Access	Constructor and Description
public	WebResourcePermission(String the URLPatternSpec that identifies the application specific web resources to which the permission pertains. All URLPatterns in the URLPatternSpec are relative to the context path of the deployed web application module, and the same URLPattern must not occur more than once in a URLPatternSpec. A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. All colons occuring within the URLPattern elements of the URLPatternSpec must be represented in escaped encoding as defined in RFC 2396. name, String identifies the HTTP methods to which the permission pertains. If the value passed through this parameter is null or the empty string, then the permission pertains to all the possible HTTP methods. actions) Creates a new WebResourcePermission with the specified name and actions.
public	WebResourcePermission(String the URLPatternSpec that identifies the application specific web resources to which the permission pertains. All URLPatterns in the URLPatternSpec are relative to the context path of the deployed web application module, and the same URLPattern must not occur more than once in a URLPatternSpec. A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. All colons occuring within the URLPattern elements of the URLPatternSpec must be represented in escaped encoding as defined in RFC 2396. urlPatternSpec, String[] an array of strings each element of which contains the value of an HTTP method. If the value passed through this parameter is null or is an array with no elements, then the permission pertains to all the possible HTTP methods. HTTPMethods) Creates a new WebResourcePermission with name corresponding to the URLPatternSpec, and actions composed from the array of HTTP methods.
public	WebResourcePermission(HttpServletRequest the HttpServletRequest object corresponding to the Servlet operation to which the permission pertains. The permission name is the substring of the requestURI (HttpServletRequest.getRequestURI()) that begins after the contextPath (HttpServletRequest.getContextPath()). When the substring operation yields the string "/", the permission is constructed with the empty string as its name. The permission's actions field is obtained from HttpServletRequest.getMethod(). The constructor must transform all colon characters occuring in the name to escaped encoding as defined in RFC 2396. request) Creates a new WebResourcePermission from the HttpServletRequest object.

Method Summary

Modifier and Type	Method and Description
public boolean	Returns: true if the argument WebResourcePermission object is equivalent to this WebResourcePermission. equals(Object the WebResourcePermission object being tested for equality with this WebResourcePermission. o) Implements abstract java.security.Permission.equals. Checks two WebResourcePermission objects for equality.
public String	Returns: a String containing the canonicalized actions of this WebResourcePermission (or the null value). getActions() Implements abstract java.security.Permission.getActions. Returns a canonical String representation of the actions of this WebResourcePermission.
private static String	getUriMinusContextPath(HttpServletRequest request) Chops the ContextPath off the front of the requestURI to yield the servletPath + PathInfo.
public int	Returns: the integer hash code value for this object. hashCode() Implements abstract java.security.Permission.hashCode. Returns the hash code value for this WebResourcePermission.
public boolean	Returns: true if the specified permission is implied by this object, false if not. implies(Permission "this" WebResourcePermission is checked to see if it implies the argument permission. permission) Implements abstract java.security.Permission.implies. Determines if the argument Permission is "implied by" this WebResourcePermission.
private void	readObject(ObjectInputStream s) readObject reads the serialized fields from the input stream and uses them to restore the permission.
private synchronized void	writeObject(ObjectOutputStream s) writeObject is used to establish the values of the serialized fields before they are written to the output stream and need not be implemented if the values of the serialized fields are always available and up to date.

Inherited from java.security.Permission:: checkGuard getName newPermissionCollection toString

Field Detail

EMPTY_STRING	back to summary
private static final transient String EMPTY_STRING

ESCAPED_COLON	back to summary
private static final transient String ESCAPED_COLON

hashCodeValue	back to summary
private transient int hashCodeValue

methodSpec	back to summary
private transient HttpMethodSpec methodSpec

serialPersistentFields	back to summary
private static final ObjectStreamField[] serialPersistentFields The serialized fields of this permission are defined below. Whether or not the serialized fields correspond to actual (private) fields is an implementation decision. Serial Fields: actions:`String` the canonicalized actions string (as returned by getActions).

serialVersionUID	back to summary
private static final long serialVersionUID Hides java.security.Permission.serialVersionUID.

urlPatternSpec	back to summary
private transient URLPatternSpec urlPatternSpec

Constructor Detail

WebResourcePermission	back to summary
public WebResourcePermission(String name, String actions) Creates a new WebResourcePermission with the specified name and actions. The name contains a URLPatternSpec that identifies the web resources to which the permissions applies. The syntax of a URLPatternSpec is as follows: URLPatternList ::= URLPattern \| URLPatternList colon URLPattern URLPatternSpec ::= null \| URLPattern \| URLPattern colon URLPatternList A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. The empty string is an exact URLPattern, and may occur anywhere in a URLPatternSpec that an exact URLPattern may occur. The first URLPattern in a URLPatternSpec may be any of the pattern types, exact, path-prefix, extension, or default as defined in the Java Servlet Specification). When a URLPatternSpec includes a URLPatternList, the patterns of the URLPatternList identify the resources to which the permission does NOT apply and depend on the pattern type and value of the first pattern as follows: No pattern may exist in the URLPatternList that matches the first pattern. If the first pattern is a path-prefix pattern, only exact patterns matched by the first pattern and path-prefix patterns matched by, but different from, the first pattern may occur in the URLPatternList. If the first pattern is an extension pattern, only exact patterns that are matched by the first pattern and path-prefix patterns may occur in the URLPatternList. If the first pattern is the default pattern, "/", any pattern except the default pattern may occur in the URLPatternList. If the first pattern is an exact pattern a URLPatternList must not be present in the URLPatternSpec. The actions parameter contains a comma seperated list of HTTP methods. The syntax of the actions parameter is defined as follows: ExtensionMethod ::= any token as defined by RFC 2616 (that is, 1*[any CHAR except CTLs or separators]) HTTPMethod ::= "GET" \| "POST" \| "PUT" \| "DELETE" \| "HEAD" \| "OPTIONS" \| "TRACE" \| ExtensionMethod HTTPMethodList ::= HTTPMethod \| HTTPMethodList comma HTTPMethod HTTPMethodExceptionList ::= exclaimationPoint HTTPMethodList HTTPMethodSpec ::= null \| HTTPMethodExceptionList \| HTTPMethodList If duplicates occur in the HTTPMethodSpec they must be eliminated by the permission constructor. A null or empty string HTTPMethodSpec indicates that the permission applies to all HTTP methods at the resources identified by the URL pattern. If the HTTPMethodSpec contains an HTTPMethodExceptionList (i.e., it begins with an exclaimationPoint), the permission pertains to all methods except those occuring in the exception list. Parameters name:String the URLPatternSpec that identifies the application specific web resources to which the permission pertains. All URLPatterns in the URLPatternSpec are relative to the context path of the deployed web application module, and the same URLPattern must not occur more than once in a URLPatternSpec. A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. All colons occuring within the URLPattern elements of the URLPatternSpec must be represented in escaped encoding as defined in RFC 2396. actions:String identifies the HTTP methods to which the permission pertains. If the value passed through this parameter is null or the empty string, then the permission pertains to all the possible HTTP methods.

WebResourcePermission

back to summary

public WebResourcePermission(String name, String actions)

Creates a new WebResourcePermission with the specified name and actions.

The name contains a URLPatternSpec that identifies the web resources to which the permissions applies. The syntax of a URLPatternSpec is as follows:


         URLPatternList ::= URLPattern | URLPatternList colon URLPattern

         URLPatternSpec ::= null | URLPattern | URLPattern colon URLPatternList

A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. The empty string is an exact URLPattern, and may occur anywhere in a URLPatternSpec that an exact URLPattern may occur. The first URLPattern in a URLPatternSpec may be any of the pattern types, exact, path-prefix, extension, or default as defined in the Java Servlet Specification). When a URLPatternSpec includes a URLPatternList, the patterns of the URLPatternList identify the resources to which the permission does NOT apply and depend on the pattern type and value of the first pattern as follows:

No pattern may exist in the URLPatternList that matches the first pattern.
If the first pattern is a path-prefix pattern, only exact patterns matched by the first pattern and path-prefix patterns matched by, but different from, the first pattern may occur in the URLPatternList.
If the first pattern is an extension pattern, only exact patterns that are matched by the first pattern and path-prefix patterns may occur in the URLPatternList.
If the first pattern is the default pattern, "/", any pattern except the default pattern may occur in the URLPatternList.
If the first pattern is an exact pattern a URLPatternList must not be present in the URLPatternSpec.

The actions parameter contains a comma seperated list of HTTP methods. The syntax of the actions parameter is defined as follows:


         ExtensionMethod ::= any token as defined by RFC 2616
                   (that is, 1*[any CHAR except CTLs or separators])

         HTTPMethod ::= "GET" | "POST" | "PUT" | "DELETE" | "HEAD" |
                  "OPTIONS" | "TRACE" | ExtensionMethod

         HTTPMethodList ::= HTTPMethod | HTTPMethodList comma HTTPMethod

         HTTPMethodExceptionList ::= exclaimationPoint HTTPMethodList

         HTTPMethodSpec ::= null | HTTPMethodExceptionList | 
                  HTTPMethodList

If duplicates occur in the HTTPMethodSpec they must be eliminated by the permission constructor.

A null or empty string HTTPMethodSpec indicates that the permission applies to all HTTP methods at the resources identified by the URL pattern.

If the HTTPMethodSpec contains an HTTPMethodExceptionList (i.e., it begins with an exclaimationPoint), the permission pertains to all methods except those occuring in the exception list.

Parameters

name:String

the URLPatternSpec that identifies the application specific web resources to which the permission pertains. All URLPatterns in the URLPatternSpec are relative to the context path of the deployed web application module, and the same URLPattern must not occur more than once in a URLPatternSpec. A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. All colons occuring within the URLPattern elements of the URLPatternSpec must be represented in escaped encoding as defined in RFC 2396.

actions:String

identifies the HTTP methods to which the permission pertains. If the value passed through this parameter is null or the empty string, then the permission pertains to all the possible HTTP methods.

WebResourcePermission	back to summary
public WebResourcePermission(String urlPatternSpec, String[] HTTPMethods) Creates a new WebResourcePermission with name corresponding to the URLPatternSpec, and actions composed from the array of HTTP methods. Parameters urlPatternSpec:String the URLPatternSpec that identifies the application specific web resources to which the permission pertains. All URLPatterns in the URLPatternSpec are relative to the context path of the deployed web application module, and the same URLPattern must not occur more than once in a URLPatternSpec. A null URLPatternSpec is translated to the default URLPattern, "/", by the permission constructor. All colons occuring within the URLPattern elements of the URLPatternSpec must be represented in escaped encoding as defined in RFC 2396. HTTPMethods:String[] an array of strings each element of which contains the value of an HTTP method. If the value passed through this parameter is null or is an array with no elements, then the permission pertains to all the possible HTTP methods.

WebResourcePermission

back to summary

public WebResourcePermission(String urlPatternSpec, String[] HTTPMethods)

Creates a new WebResourcePermission with name corresponding to the URLPatternSpec, and actions composed from the array of HTTP methods.

Parameters

urlPatternSpec:String

HTTPMethods:String[]

an array of strings each element of which contains the value of an HTTP method. If the value passed through this parameter is null or is an array with no elements, then the permission pertains to all the possible HTTP methods.

WebResourcePermission	back to summary
public WebResourcePermission(HttpServletRequest request) Creates a new WebResourcePermission from the HttpServletRequest object. Parameters request:HttpServletRequest the HttpServletRequest object corresponding to the Servlet operation to which the permission pertains. The permission name is the substring of the requestURI (HttpServletRequest.getRequestURI()) that begins after the contextPath (HttpServletRequest.getContextPath()). When the substring operation yields the string "/", the permission is constructed with the empty string as its name. The permission's actions field is obtained from HttpServletRequest.getMethod(). The constructor must transform all colon characters occuring in the name to escaped encoding as defined in RFC 2396.

WebResourcePermission

back to summary

public WebResourcePermission(HttpServletRequest request)

Creates a new WebResourcePermission from the HttpServletRequest object.

Parameters

request:HttpServletRequest: the HttpServletRequest object corresponding to the Servlet operation to which the permission pertains. The permission name is the substring of the requestURI (HttpServletRequest.getRequestURI()) that begins after the contextPath (HttpServletRequest.getContextPath()). When the substring operation yields the string "/", the permission is constructed with the empty string as its name. The permission's actions field is obtained from HttpServletRequest.getMethod(). The constructor must transform all colon characters occuring in the name to escaped encoding as defined in RFC 2396.

Method Detail

equals	back to summary
public boolean equals(Object o) Implements abstract java.security.Permission.equals. Checks two WebResourcePermission objects for equality. WebResourcePermission objects are equivalent if their URLPatternSpec and (canonicalized) actions values are equivalent. The URLPatternSpec of a reference permission is equivalent to that of an argument permission if their first patterns are equivalent, and the patterns of the URLPatternList of the reference permission collectively match exactly the same set of patterns as are matched by the patterns of the URLPatternList of the argument permission. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) && P2.implies(P1). Parameters o:Object the WebResourcePermission object being tested for equality with this WebResourcePermission. Returns:boolean true if the argument WebResourcePermission object is equivalent to this WebResourcePermission.

equals

back to summary

public boolean equals(Object o)

Implements abstract java.security.Permission.equals.

Checks two WebResourcePermission objects for equality. WebResourcePermission objects are equivalent if their URLPatternSpec and (canonicalized) actions values are equivalent. The URLPatternSpec of a reference permission is equivalent to that of an argument permission if their first patterns are equivalent, and the patterns of the URLPatternList of the reference permission collectively match exactly the same set of patterns as are matched by the patterns of the URLPatternList of the argument permission.

Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) && P2.implies(P1).

Parameters

o:Object

the WebResourcePermission object being tested for equality with this WebResourcePermission.

Returns:boolean

true if the argument WebResourcePermission object is equivalent to this WebResourcePermission.

getActions	back to summary
public String getActions() Implements abstract java.security.Permission.getActions. Returns a canonical String representation of the actions of this WebResourcePermission. In the canonical form, predefined methods preceed extension methods, and within each method classification the corresponding methods occur in ascending lexical order. There may be no duplicate HTTP methods in the canonical form, and the canonical form of the set of all HTTP methods is the value null. Returns:String a String containing the canonicalized actions of this WebResourcePermission (or the null value).

getActions

back to summary

public String getActions()

Implements abstract java.security.Permission.getActions.

Returns a canonical String representation of the actions of this WebResourcePermission. In the canonical form, predefined methods preceed extension methods, and within each method classification the corresponding methods occur in ascending lexical order. There may be no duplicate HTTP methods in the canonical form, and the canonical form of the set of all HTTP methods is the value null.

Returns:String: a String containing the canonicalized actions of this WebResourcePermission (or the null value).

getUriMinusContextPath	back to summary
private static String getUriMinusContextPath(HttpServletRequest request) Chops the ContextPath off the front of the requestURI to yield the servletPath + PathInfo. For the special case where the servletPath + PathInfo is the pattern, "/", this routine returns the empty string.

hashCode	back to summary
public int hashCode() Implements abstract java.security.Permission.hashCode. Returns the hash code value for this WebResourcePermission. The properties of the returned hash code must be as follows: During the lifetime of a Java application, the hashCode method must return the same integer value, every time it is called on a WebResourcePermission object. The value returned by hashCode for a particular WebResourcePermission need not remain consistent from one execution of an application to another. If two WebResourcePermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). Returns:int the integer hash code value for this object.

hashCode

back to summary

public int hashCode()

Implements abstract java.security.Permission.hashCode.

Returns the hash code value for this WebResourcePermission. The properties of the returned hash code must be as follows:

During the lifetime of a Java application, the hashCode method must return the same integer value, every time it is called on a WebResourcePermission object. The value returned by hashCode for a particular WebResourcePermission need not remain consistent from one execution of an application to another.
If two WebResourcePermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application).

Returns:int: the integer hash code value for this object.

implies	back to summary
public boolean implies(Permission permission) Implements abstract java.security.Permission.implies. Determines if the argument Permission is "implied by" this WebResourcePermission. For this to be the case, all of the following must be true: The argument is an instanceof WebResourcePermission The first URLPattern in the name of the argument permission is matched by the first URLPattern in the name of this permission. The first URLPattern in the name of the argument permission is NOT matched by any URLPattern in the URLPatternList of the URLPatternSpec of this permission. If the first URLPattern in the name of the argument permission matches the first URLPattern in the URLPatternSpec of this permission, then every URLPattern in the URLPatternList of the URLPatternSpec of this permission is matched by a URLPattern in the URLPatternList of the argument permission. The HTTP methods represented by the actions of the argument permission are a subset of the HTTP methods represented by the actions of this permission. URLPattern matching is performed using the Servlet matching rules where two URL patterns match if they are related as follows: their pattern values are String equivalent, or this pattern is the path-prefix pattern "/", or this pattern is a path-prefix pattern (that is, it starts with "/" and ends with "/") and the argument pattern starts with the substring of this pattern, minus its last 2 characters, and the next character of the argument pattern, if there is one, is "/", or this pattern is an extension pattern (that is, it starts with "*.") and the argument pattern ends with this pattern, or the reference pattern is the special default pattern, "/", which matches all argument patterns. All of the comparisons described above are case sensitive. Parameters permission:Permission "this" WebResourcePermission is checked to see if it implies the argument permission. Returns:boolean true if the specified permission is implied by this object, false if not.

implies

back to summary

public boolean implies(Permission permission)

Implements abstract java.security.Permission.implies.

Determines if the argument Permission is "implied by" this WebResourcePermission. For this to be the case, all of the following must be true:

The argument is an instanceof WebResourcePermission
The first URLPattern in the name of the argument permission is matched by the first URLPattern in the name of this permission.
The first URLPattern in the name of the argument permission is NOT matched by any URLPattern in the URLPatternList of the URLPatternSpec of this permission.
If the first URLPattern in the name of the argument permission matches the first URLPattern in the URLPatternSpec of this permission, then every URLPattern in the URLPatternList of the URLPatternSpec of this permission is matched by a URLPattern in the URLPatternList of the argument permission.
The HTTP methods represented by the actions of the argument permission are a subset of the HTTP methods represented by the actions of this permission.

URLPattern matching is performed using the Servlet matching rules where two URL patterns match if they are related as follows:

their pattern values are String equivalent, or
this pattern is the path-prefix pattern "/*", or
this pattern is a path-prefix pattern (that is, it starts with "/" and ends with "/*") and the argument pattern starts with the substring of this pattern, minus its last 2 characters, and the next character of the argument pattern, if there is one, is "/", or
this pattern is an extension pattern (that is, it starts with "*.") and the argument pattern ends with this pattern, or
the reference pattern is the special default pattern, "/", which matches all argument patterns.

All of the comparisons described above are case sensitive.

Parameters

permission:Permission

"this" WebResourcePermission is checked to see if it implies the argument permission.

Returns:boolean

true if the specified permission is implied by this object, false if not.

readObject	back to summary
private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException readObject reads the serialized fields from the input stream and uses them to restore the permission. This method need not be implemented if establishing the values of the serialized fields (as is done by defaultReadObject) is sufficient to initialize the permission.

writeObject	back to summary
private synchronized void writeObject(ObjectOutputStream s) throws IOException writeObject is used to establish the values of the serialized fields before they are written to the output stream and need not be implemented if the values of the serialized fields are always available and up to date. The serialized fields are written to the output stream in the same form as they would be written by defaultWriteObject.

writeObject

back to summary

private synchronized void writeObject(ObjectOutputStream s) throws IOException

writeObject is used to establish the values of the serialized fields before they are written to the output stream and need not be implemented if the values of the serialized fields are always available and up to date. The serialized fields are written to the output stream in the same form as they would be written by defaultWriteObject.

public final Class WebResourcePermission

Field Summary

Constructor Summary

Method Summary

Field Detail

Constructor Detail

Method Detail