jdk-sandbox: comparison jdk/src/java.base/share/classes/java/security/ProtectionDomain.java

equal deleted inserted replaced

-:e3a56c19a668
+:2d542b973871
 /* if the permissions object has AllPermission */
 private boolean hasAllPerm = false;
 /* the PermissionCollection is static (pre 1.4 constructor)
 or dynamic (via a policy refresh) */
-private boolean staticPermissions;
+private final boolean staticPermissions;
 /*
 * An object used as a key when the ProtectionDomain is stored in a Map.
 */
 final Key key = new Key();
 /**
 * Creates a new ProtectionDomain with the given CodeSource and
 * Permissions. If the permissions object is not null, then
 *  {@code setReadOnly()} will be called on the passed in
-* Permissions object. The only permissions granted to this domain
+* Permissions object.
-* are the ones specified; the current Policy will not be consulted.
+* <p>
+* The permissions granted to this domain are static, i.e.
+* invoking the {@link #staticPermissionsOnly()} method returns true.
+* They contain only the ones passed to this constructor and
+* the current Policy will not be consulted.
 *
 * @param codesource the codesource associated with this domain
 * @param permissions the permissions granted to this domain
 */
 public ProtectionDomain(CodeSource codesource,
 /**
 * Creates a new ProtectionDomain qualified by the given CodeSource,
 * Permissions, ClassLoader and array of Principals. If the
 * permissions object is not null, then {@code setReadOnly()}
 * will be called on the passed in Permissions object.
-* The permissions granted to this domain are dynamic; they include
+* <p>
-* both the static permissions passed to this constructor, and any
+* The permissions granted to this domain are dynamic, i.e.
-* permissions granted to this domain by the current Policy at the
+* invoking the {@link #staticPermissionsOnly()} method returns false.
+* They include both the static permissions passed to this constructor,
+* and any permissions granted to this domain by the current Policy at the
 * time a permission is checked.
 * <p>
 * This constructor is typically used by
 * {@link SecureClassLoader ClassLoaders}
 * and {@link DomainCombiner DomainCombiners} which delegate to
 public final PermissionCollection getPermissions() {
 return permissions;
 }
 /**
+* Returns true if this domain contains only static permissions
+* and does not check the current {@code Policy} at the time of
+* permission checking.
+*
+* @return true if this domain contains only static permissions.
+*
+* @since 9
+*/
+public final boolean staticPermissionsOnly() {
+return this.staticPermissions;
+}
+/**
 * Check and see if this ProtectionDomain implies the permissions
 * expressed in the Permission object.
 * <p>
 * The set of permissions evaluated is a function of whether the
 * ProtectionDomain was constructed with a static set of permissions
 * or it was bound to a dynamically mapped set of permissions.
 * <p>
-* If the ProtectionDomain was constructed to a
+* If the {@link #staticPermissionsOnly()} method returns
-* {@link #ProtectionDomain(CodeSource, PermissionCollection)
+* true, then the permission will only be checked against the
-* statically bound} PermissionCollection then the permission will
+* PermissionCollection supplied at construction.
-* only be checked against the PermissionCollection supplied at
-* construction.
 * <p>
-* However, if the ProtectionDomain was constructed with
+* Otherwise, the permission will be checked against the combination
-* the constructor variant which supports
+* of the PermissionCollection supplied at construction and
-* {@link #ProtectionDomain(CodeSource, PermissionCollection,
-* ClassLoader, java.security.Principal[]) dynamically binding}
-* permissions, then the permission will be checked against the
-* combination of the PermissionCollection supplied at construction and
 * the current Policy binding.
 *
-* @param permission the Permission object to check.
+* @param perm the Permission object to check.
 *
-* @return true if "permission" is implicit to this ProtectionDomain.
+* @return true if {@code perm} is implied by this ProtectionDomain.
 */
-public boolean implies(Permission permission) {
+public boolean implies(Permission perm) {
 if (hasAllPerm) {
 // internal permission collection already has AllPermission -
 // no need to go to policy
 return true;
 }
 if (!staticPermissions &&
-Policy.getPolicyNoCheck().implies(this, permission))
+Policy.getPolicyNoCheck().implies(this, perm))
 return true;
 if (permissions != null)
-return permissions.implies(permission);
+return permissions.implies(perm);
 return false;
 }
 // called by the VM -- do not remove

changeset 39747	2d542b973871
parent 37882	e7f3cf12e739
child 41377	271ee055cb31