PolicyEntry.java revision f6c387128427e121477c1b32ad35cdcaa5101ba3
1f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/*
2f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  Licensed to the Apache Software Foundation (ASF) under one or more
3f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  contributor license agreements.  See the NOTICE file distributed with
4f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  this work for additional information regarding copyright ownership.
5f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  The ASF licenses this file to You under the Apache License, Version 2.0
6f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  (the "License"); you may not use this file except in compliance with
7f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  the License.  You may obtain a copy of the License at
8f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *
9f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *     http://www.apache.org/licenses/LICENSE-2.0
10f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *
11f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  Unless required by applicable law or agreed to in writing, software
12f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  distributed under the License is distributed on an "AS IS" BASIS,
13f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  See the License for the specific language governing permissions and
15f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *  limitations under the License.
16f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */
17f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
18f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/**
19f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project* @author Alexey V. Varlamov
20f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project* @version $Revision$
21f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project*/
22f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
23f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectpackage org.apache.harmony.security;
24f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
25f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.security.CodeSource;
26f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.security.Permission;
27f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.security.Principal;
28f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.util.Collection;
29f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport java.util.Collections;
30f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
31f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectimport org.apache.harmony.security.fortress.PolicyUtils;
32f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
33f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
34f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project/**
35f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * This class represents an elementary block of a security policy. It associates
36f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * a CodeSource of an executable code, Principals allowed to execute the code,
37f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * and a set of granted Permissions.
38f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project *
39f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project * @see org.apache.harmony.security.fortress.DefaultPolicy
40f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project */
41f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Projectpublic class PolicyEntry {
42f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
43f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    // Store CodeSource
44f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    private final CodeSource cs;
45f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
46f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    // Array of principals
47f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    private final Principal[] principals;
48f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
49f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    // Permissions collection
50f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    private final Collection<Permission> permissions;
51f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
52f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    /**
53f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * Constructor with initialization parameters. Passed collections are not
54f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * referenced directly, but copied.
55f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     */
56f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    public PolicyEntry(CodeSource cs, Collection<? extends Principal> prs,
57f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project            Collection<? extends Permission> permissions) {
58f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        this.cs = cs;
59f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        this.principals = (prs == null || prs.isEmpty()) ? null
60f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project                : (Principal[]) prs.toArray(new Principal[prs.size()]);
61f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        this.permissions = (permissions == null || permissions.isEmpty()) ? null
62f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project                : Collections.unmodifiableCollection(permissions);
63f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    }
64f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
65f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    /**
66f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * Checks if passed CodeSource matches this PolicyEntry. Null CodeSource of
67f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * PolicyEntry implies any CodeSource; non-null CodeSource forwards to its
68f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * imply() method.
69f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     */
70f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    public boolean impliesCodeSource(CodeSource codeSource) {
71f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        return (cs == null) ? true : cs.implies(codeSource);
72f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    }
73f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
74f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    /**
75f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * Checks if specified Principals match this PolicyEntry. Null or empty set
76f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * of Principals of PolicyEntry implies any Principals; otherwise specified
77f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * array must contain all Principals of this PolicyEntry.
78f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     */
79f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    public boolean impliesPrincipals(Principal[] prs) {
80f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        return PolicyUtils.matchSubset(principals, prs);
81f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    }
82f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
83f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    /**
84f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * Returns unmodifiable collection of permissions defined by this
85f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * PolicyEntry, may be <code>null</code>.
86f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     */
87f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    public Collection<Permission> getPermissions() {
88f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        return permissions;
89f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    }
90f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project
91f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    /**
92f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     * Returns true if this PolicyEntry defines no Permissions, false otherwise.
93f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project     */
94f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    public boolean isVoid() {
95f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project        return permissions == null || permissions.size() == 0;
96f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project    }
97f6c387128427e121477c1b32ad35cdcaa5101ba3The Android Open Source Project}
98