public class

JMXSubjectDomainCombiner

extends SubjectDomainCombiner
java.lang.Object
   ↳ javax.security.auth.SubjectDomainCombiner
     ↳ com.sun.jmx.remote.security.JMXSubjectDomainCombiner

Class Overview

This class represents an extension to the SubjectDomainCombiner and is used to add a new ProtectionDomain, comprised of a null codesource/signers and an empty permission set, to the access control context with which this combiner is combined.

When the combine(ProtectionDomain[], ProtectionDomain[]) method is called the ProtectionDomain is augmented with the permissions granted to the set of principals present in the supplied Subject.

Summary

Public Constructors
JMXSubjectDomainCombiner(Subject s)
Public Methods
ProtectionDomain[] combine(ProtectionDomain[] current, ProtectionDomain[] assigned)
Update the relevant ProtectionDomains with the Principals from the Subject associated with this SubjectDomainCombiner.
static AccessControlContext getContext(Subject subject)
Get the current AccessControlContext combined with the supplied subject.
static AccessControlContext getDomainCombinerContext(Subject subject)
Get the AccessControlContext of the domain combiner created with the supplied subject, i.e.
[Expand]
Inherited Methods
From class javax.security.auth.SubjectDomainCombiner
From class java.lang.Object
From interface java.security.DomainCombiner

Public Constructors

public JMXSubjectDomainCombiner (Subject s)

Public Methods

public ProtectionDomain[] combine (ProtectionDomain[] current, ProtectionDomain[] assigned)

Update the relevant ProtectionDomains with the Principals from the Subject associated with this SubjectDomainCombiner.

A new ProtectionDomain instance is created for each ProtectionDomain in the currentDomains array. Each new ProtectionDomain instance is created using the CodeSource, Permissions and ClassLoader from the corresponding ProtectionDomain in currentDomains, as well as with the Principals from the Subject associated with this SubjectDomainCombiner.

All of the newly instantiated ProtectionDomains are combined into a new array. The ProtectionDomains from the assignedDomains array are appended to this new array, and the result is returned.

Note that optimizations such as the removal of duplicate ProtectionDomains may have occurred. In addition, caching of ProtectionDomains may be permitted.

Parameters
current the ProtectionDomains associated with the current execution Thread, up to the most recent privileged ProtectionDomain. The ProtectionDomains are are listed in order of execution, with the most recently executing ProtectionDomain residing at the beginning of the array. This parameter may be null if the current execution Thread has no associated ProtectionDomains.

assigned the ProtectionDomains inherited from the parent Thread, or the ProtectionDomains from the privileged context, if a call to AccessController.doPrivileged(..., context) had occurred This parameter may be null if there were no ProtectionDomains inherited from the parent Thread, or from the privileged context.
Returns
  • a new array consisting of the updated ProtectionDomains, or null.

public static AccessControlContext getContext (Subject subject)

Get the current AccessControlContext combined with the supplied subject.

public static AccessControlContext getDomainCombinerContext (Subject subject)

Get the AccessControlContext of the domain combiner created with the supplied subject, i.e. an AccessControlContext with the domain combiner created with the supplied subject and where the caller's context has been removed.