org.wildfly.extension.security.manager.deployment

Class PermissionsValidationProcessor

java.lang.Object

org.wildfly.extension.security.manager.deployment.PermissionsValidationProcessor

All Implemented Interfaces:

DeploymentUnitProcessor

public class PermissionsValidationProcessor
extends Object
implements DeploymentUnitProcessor

This class implements a DeploymentUnitProcessor that validates the security permissions that have been granted to the deployments. The permissions granted via subsystem (minimum-set) combined with those granted via deployment descriptors (permissions.xml and jboss-permissions.xml) must be implied by the maximum-set.

Permissions that are internally granted by the container are ignored as those are always granted irrespective of the maximum-set configuration.

This processor must be installed into Phase.POST_MODULE because it needs the deployment module's ClassLoader to load the permissions from the descriptors and that is only available after the module has been created.

Author:

Stefan Guilhen

Constructor Summary

Constructors

Constructor and Description
PermissionsValidationProcessor(List<org.jboss.modules.security.PermissionFactory> maxPermissions) Creates an instance of this DeploymentUnitProcessor.

Method Summary

Modifier and Type	Method and Description
void	deploy(DeploymentPhaseContext phaseContext)
void	undeploy(DeploymentUnit context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PermissionsValidationProcessor

public PermissionsValidationProcessor(List<org.jboss.modules.security.PermissionFactory> maxPermissions)

Creates an instance of this DeploymentUnitProcessor.

Parameters:

maxPermissions - a List containing the maximum set of configurable permissions a deployment can have. In other words, all permissions in the minimum set plus the permissions parsed in META-INF/permissions.xml (or jboss-permissions.xml) must be implied by the maximum set.

Method Detail

deploy

public void deploy(DeploymentPhaseContext phaseContext)
            throws DeploymentUnitProcessingException

Specified by:

deploy in interface DeploymentUnitProcessor

Throws:

DeploymentUnitProcessingException

undeploy

public void undeploy(DeploymentUnit context)

Specified by:

undeploy in interface DeploymentUnitProcessor