com.hazelcast.security

Interface SecurityContext

public interface SecurityContext

SecurityContext is responsible for managing lifecycle of security object such as ICredentialsFactory, IPermissionPolicy etc, to creating LoginContextes for member and client authentications and checking permissions for client operations.

Method Summary

Modifier and Type	Method and Description
void	checkPermission(Subject subject, Permission permission) Checks whether current Subject has been granted specified permission or not.
LoginContext	createClientLoginContext(String clusterName, Credentials credentials, com.hazelcast.internal.nio.Connection connection) Creates client LoginContext.
LoginContext	createMemberLoginContext(String clusterName, Credentials credentials, com.hazelcast.internal.nio.Connection connection) Creates member LoginContext.
<V> SecureCallable<V>	createSecureCallable(Subject subject, Callable<V> callable) Creates secure callable that runs in a sandbox.
<V> SecureCallable<?>	createSecureCallable(Subject subject, Runnable runnable) Creates secure callable that runs in a sandbox.
void	destroy() Destroys SecurityContext and all security elements.
ICredentialsFactory	getCredentialsFactory() Returns current ICredentialsFactory.
void	interceptAfter(Credentials credentials, String serviceName, String objectName, String methodName) intercepts a request after process if any SecurityInterceptor configured Any exception thrown during interception will be ignored
void	interceptBefore(Credentials credentials, String serviceName, String objectName, String methodName, Object[] parameters) intercepts a request before process if any SecurityInterceptor configured
void	refreshPermissions(Set<PermissionConfig> permissionConfigs)

Method Detail

createMemberLoginContext

LoginContext createMemberLoginContext(String clusterName,
                                      Credentials credentials,
                                      com.hazelcast.internal.nio.Connection connection)
                               throws LoginException

Creates member LoginContext.

Parameters:

clusterName - cluster name received from the connecting member

credentials - member credentials

connection - member connection

Returns:

LoginContext

Throws:

LoginException - in case of any exceptional case

createClientLoginContext

LoginContext createClientLoginContext(String clusterName,
                                      Credentials credentials,
                                      com.hazelcast.internal.nio.Connection connection)
                               throws LoginException

Creates client LoginContext.

Parameters:

clusterName - cluster name reported on the client protocol

credentials - client credentials

connection - client connection

Returns:

LoginContext

Throws:

LoginException - in case of any exceptional case

getCredentialsFactory

ICredentialsFactory getCredentialsFactory()

Returns current ICredentialsFactory.

Returns:

ICredentialsFactory

checkPermission

void checkPermission(Subject subject,
                     Permission permission)
              throws AccessControlException

Checks whether current Subject has been granted specified permission or not.

Parameters:

subject - the current subject

permission - the specified permission for the subject

Throws:

AccessControlException - if the specified permission has not been granted to the subject

interceptBefore

void interceptBefore(Credentials credentials,
                     String serviceName,
                     String objectName,
                     String methodName,
                     Object[] parameters)
              throws AccessControlException

intercepts a request before process if any SecurityInterceptor configured

Parameters:

credentials -

serviceName -

objectName -

methodName -

parameters -

Throws:

AccessControlException - if access is denied

interceptAfter

void interceptAfter(Credentials credentials,
                    String serviceName,
                    String objectName,
                    String methodName)

intercepts a request after process if any SecurityInterceptor configured Any exception thrown during interception will be ignored

Parameters:

credentials -

serviceName -

objectName -

methodName -

createSecureCallable

<V> SecureCallable<V> createSecureCallable(Subject subject,
                                           Callable<V> callable)

Creates secure callable that runs in a sandbox.

Type Parameters:

V - return type of callable

Parameters:

subject -

callable -

Returns:

result of callable

createSecureCallable

<V> SecureCallable<?> createSecureCallable(Subject subject,
                                           Runnable runnable)

Creates secure callable that runs in a sandbox.

Type Parameters:

V - return type of callable

Parameters:

subject -

runnable -

Returns:

Will always return null after Runnable finishes running.

destroy

void destroy()

Destroys SecurityContext and all security elements.

refreshPermissions

void refreshPermissions(Set<PermissionConfig> permissionConfigs)