java.lang
Class SecurityManager

java.lang.Object sample code for java.lang.Object definition code for java.lang.Object 
  extended by java.lang.SecurityManager
Direct Known Subclasses:
RMISecurityManager sample code for java.rmi.RMISecurityManager definition code for java.rmi.RMISecurityManager

public class SecurityManager
extends Object sample code for java.lang.Object definition code for java.lang.Object

The security manager is a class that allows applications to implement a security policy. It allows an application to determine, before performing a possibly unsafe or sensitive operation, what the operation is and whether it is being attempted in a security context that allows the operation to be performed. The application can allow or disallow the operation.

The SecurityManager class contains many methods with names that begin with the word check. These methods are called by various methods in the Java libraries before those methods perform certain potentially sensitive operations. The invocation of such a check method typically looks like this:

     SecurityManager security = System.getSecurityManager();
     if (security != null) {
         security.checkXXX(argument,  . . . );
     }
 

The security manager is thereby given an opportunity to prevent completion of the operation by throwing an exception. A security manager routine simply returns if the operation is permitted, but throws a SecurityException if the operation is not permitted. The only exception to this convention is checkTopLevelWindow, which returns a boolean value.

The current security manager is set by the setSecurityManager method in class System. The current security manager is obtained by the getSecurityManager method.

The special method checkPermission(java.security.Permission) sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission) determines whether an access request indicated by a specified permission should be granted or denied. The default implementation calls

   AccessController.checkPermission(perm);
 

If a requested access is allowed, checkPermission returns quietly. If denied, a SecurityException is thrown.

As of Java 2 SDK v1.2, the default implementation of each of the other check methods in SecurityManager is to call the SecurityManager checkPermission method to determine if the calling thread has permission to perform the requested operation.

Note that the checkPermission method with just a single permission argument always performs security checks within the context of the currently executing thread. Sometimes a security check that should be made within a given context will actually need to be done from within a different context (for example, from within a worker thread). The getSecurityContext sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext() method and the checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object) method that includes a context argument are provided for this situation. The getSecurityContext method returns a "snapshot" of the current calling context. (The default implementation returns an AccessControlContext object.) A sample call is the following:

   Object context = null;
   SecurityManager sm = System.getSecurityManager();
   if (sm != null) context = sm.getSecurityContext(); 
 

The checkPermission method that takes a context object in addition to a permission makes access decisions based on that context, rather than on that of the current execution thread. Code within a different context can thus call that method, passing the permission and the previously-saved context object. A sample call, using the SecurityManager sm obtained as in the previous example, is the following:

   if (sm != null) sm.checkPermission(permission, context);
 

Permissions fall into these categories: File, Socket, Net, Security, Runtime, Property, AWT, Reflect, and Serializable. The classes managing these various permission categories are java.io.FilePermission, java.net.SocketPermission, java.net.NetPermission, java.security.SecurityPermission, java.lang.RuntimePermission, java.util.PropertyPermission, java.awt.AWTPermission, java.lang.reflect.ReflectPermission, and java.io.SerializablePermission.

All but the first two (FilePermission and SocketPermission) are subclasses of java.security.BasicPermission, which itself is an abstract subclass of the top-level class for permissions, which is java.security.Permission. BasicPermission defines the functionality needed for all permissions that contain a name that follows the hierarchical property naming convention (for example, "exitVM", "setFactory", "queuePrintJob", etc). An asterisk may appear at the end of the name, following a ".", or by itself, to signify a wildcard match. For example: "a.*" or "*" is valid, "*a" or "a*b" is not valid.

FilePermission and SocketPermission are subclasses of the top-level class for permissions (java.security.Permission). Classes like these that have a more complicated name syntax than that used by BasicPermission subclass directly from Permission rather than from BasicPermission. For example, for a java.io.FilePermission object, the permission name is the path name of a file (or directory).

Some of the permission classes have an "actions" list that tells the actions that are permitted for the object. For example, for a java.io.FilePermission object, the actions list (such as "read, write") specifies which actions are granted for the specified file (or for files in the specified directory).

Other permission classes are for "named" permissions - ones that contain a name but no actions list; you either have the named permission or you don't.

Note: There is also a java.security.AllPermission permission that implies all permissions. It exists to simplify the work of system administrators who might need to perform multiple tasks that require all (or numerous) permissions.

See Permissions in the JDK for permission-related information. This document includes, for example, a table listing the various SecurityManager check methods and the permission(s) the default implementation of each such method requires. It also contains a table of all the version 1.2 methods that require permissions, and for each such method tells which permission it requires.

For more information about SecurityManager changes made in the JDK and advice regarding porting of 1.1-style security managers, see the security documentation.

Since:
JDK1.0
See Also:
ClassLoader sample code for java.lang.ClassLoader definition code for java.lang.ClassLoader , SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException , checkTopLevelWindow sample code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object) definition code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object) , getSecurityManager sample code for java.lang.System.getSecurityManager() definition code for java.lang.System.getSecurityManager() , setSecurityManager sample code for java.lang.System.setSecurityManager(java.lang.SecurityManager) definition code for java.lang.System.setSecurityManager(java.lang.SecurityManager) , AccessController sample code for java.security.AccessController definition code for java.security.AccessController , AccessControlContext sample code for java.security.AccessControlContext definition code for java.security.AccessControlContext , AccessControlException sample code for java.security.AccessControlException definition code for java.security.AccessControlException , Permission sample code for java.security.Permission definition code for java.security.Permission , BasicPermission sample code for java.security.BasicPermission definition code for java.security.BasicPermission , FilePermission sample code for java.io.FilePermission definition code for java.io.FilePermission , SocketPermission sample code for java.net.SocketPermission definition code for java.net.SocketPermission , PropertyPermission sample code for java.util.PropertyPermission definition code for java.util.PropertyPermission , RuntimePermission sample code for java.lang.RuntimePermission definition code for java.lang.RuntimePermission , AWTPermission sample code for java.awt.AWTPermission definition code for java.awt.AWTPermission , Policy sample code for java.security.Policy definition code for java.security.Policy , SecurityPermission sample code for java.security.SecurityPermission definition code for java.security.SecurityPermission , ProtectionDomain sample code for java.security.ProtectionDomain definition code for java.security.ProtectionDomain

Field Summary
protected  boolean inCheck sample code for java.lang.SecurityManager.inCheck definition code for java.lang.SecurityManager.inCheck
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
 
Constructor Summary
SecurityManager sample code for java.lang.SecurityManager.SecurityManager() definition code for java.lang.SecurityManager.SecurityManager() ()
          Constructs a new SecurityManager.
 
Method Summary
 void checkAccept sample code for java.lang.SecurityManager.checkAccept(java.lang.String, int) definition code for java.lang.SecurityManager.checkAccept(java.lang.String, int) (String sample code for java.lang.String definition code for java.lang.String  host, int port)
          Throws a SecurityException if the calling thread is not permitted to accept a socket connection from the specified host and port number.
 void checkAccess sample code for java.lang.SecurityManager.checkAccess(java.lang.Thread) definition code for java.lang.SecurityManager.checkAccess(java.lang.Thread) (Thread sample code for java.lang.Thread definition code for java.lang.Thread  t)
          Throws a SecurityException if the calling thread is not allowed to modify the thread argument.
 void checkAccess sample code for java.lang.SecurityManager.checkAccess(java.lang.ThreadGroup) definition code for java.lang.SecurityManager.checkAccess(java.lang.ThreadGroup) (ThreadGroup sample code for java.lang.ThreadGroup definition code for java.lang.ThreadGroup  g)
          Throws a SecurityException if the calling thread is not allowed to modify the thread group argument.
 void checkAwtEventQueueAccess sample code for java.lang.SecurityManager.checkAwtEventQueueAccess() definition code for java.lang.SecurityManager.checkAwtEventQueueAccess() ()
          Throws a SecurityException if the calling thread is not allowed to access the AWT event queue.
 void checkConnect sample code for java.lang.SecurityManager.checkConnect(java.lang.String, int) definition code for java.lang.SecurityManager.checkConnect(java.lang.String, int) (String sample code for java.lang.String definition code for java.lang.String  host, int port)
          Throws a SecurityException if the calling thread is not allowed to open a socket connection to the specified host and port number.
 void checkConnect sample code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object) definition code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object) (String sample code for java.lang.String definition code for java.lang.String  host, int port, Object sample code for java.lang.Object definition code for java.lang.Object  context)
          Throws a SecurityException if the specified security context is not allowed to open a socket connection to the specified host and port number.
 void checkCreateClassLoader sample code for java.lang.SecurityManager.checkCreateClassLoader() definition code for java.lang.SecurityManager.checkCreateClassLoader() ()
          Throws a SecurityException if the calling thread is not allowed to create a new class loader.
 void checkDelete sample code for java.lang.SecurityManager.checkDelete(java.lang.String) definition code for java.lang.SecurityManager.checkDelete(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  file)
          Throws a SecurityException if the calling thread is not allowed to delete the specified file.
 void checkExec sample code for java.lang.SecurityManager.checkExec(java.lang.String) definition code for java.lang.SecurityManager.checkExec(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  cmd)
          Throws a SecurityException if the calling thread is not allowed to create a subprocess.
 void checkExit sample code for java.lang.SecurityManager.checkExit(int) definition code for java.lang.SecurityManager.checkExit(int) (int status)
          Throws a SecurityException if the calling thread is not allowed to cause the Java Virtual Machine to halt with the specified status code.
 void checkLink sample code for java.lang.SecurityManager.checkLink(java.lang.String) definition code for java.lang.SecurityManager.checkLink(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  lib)
          Throws a SecurityException if the calling thread is not allowed to dynamic link the library code specified by the string argument file.
 void checkListen sample code for java.lang.SecurityManager.checkListen(int) definition code for java.lang.SecurityManager.checkListen(int) (int port)
          Throws a SecurityException if the calling thread is not allowed to wait for a connection request on the specified local port number.
 void checkMemberAccess sample code for java.lang.SecurityManager.checkMemberAccess(java.lang.Class, int) definition code for java.lang.SecurityManager.checkMemberAccess(java.lang.Class, int) (Class sample code for java.lang.Class definition code for java.lang.Class <?> clazz, int which)
          Throws a SecurityException if the calling thread is not allowed to access members.
 void checkMulticast sample code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress) definition code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress) (InetAddress sample code for java.net.InetAddress definition code for java.net.InetAddress  maddr)
          Throws a SecurityException if the calling thread is not allowed to use (join/leave/send/receive) IP multicast.
 void checkMulticast sample code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress, byte) definition code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress, byte) (InetAddress sample code for java.net.InetAddress definition code for java.net.InetAddress  maddr, byte ttl)
          Deprecated. Use #checkPermission(java.security.Permission) instead
 void checkPackageAccess sample code for java.lang.SecurityManager.checkPackageAccess(java.lang.String) definition code for java.lang.SecurityManager.checkPackageAccess(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  pkg)
          Throws a SecurityException if the calling thread is not allowed to access the package specified by the argument.
 void checkPackageDefinition sample code for java.lang.SecurityManager.checkPackageDefinition(java.lang.String) definition code for java.lang.SecurityManager.checkPackageDefinition(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  pkg)
          Throws a SecurityException if the calling thread is not allowed to define classes in the package specified by the argument.
 void checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission) (Permission sample code for java.security.Permission definition code for java.security.Permission  perm)
          Throws a SecurityException if the requested access, specified by the given permission, is not permitted based on the security policy currently in effect.
 void checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object) (Permission sample code for java.security.Permission definition code for java.security.Permission  perm, Object sample code for java.lang.Object definition code for java.lang.Object  context)
          Throws a SecurityException if the specified security context is denied access to the resource specified by the given permission.
 void checkPrintJobAccess sample code for java.lang.SecurityManager.checkPrintJobAccess() definition code for java.lang.SecurityManager.checkPrintJobAccess() ()
          Throws a SecurityException if the calling thread is not allowed to initiate a print job request.
 void checkPropertiesAccess sample code for java.lang.SecurityManager.checkPropertiesAccess() definition code for java.lang.SecurityManager.checkPropertiesAccess() ()
          Throws a SecurityException if the calling thread is not allowed to access or modify the system properties.
 void checkPropertyAccess sample code for java.lang.SecurityManager.checkPropertyAccess(java.lang.String) definition code for java.lang.SecurityManager.checkPropertyAccess(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  key)
          Throws a SecurityException if the calling thread is not allowed to access the system property with the specified key name.
 void checkRead sample code for java.lang.SecurityManager.checkRead(java.io.FileDescriptor) definition code for java.lang.SecurityManager.checkRead(java.io.FileDescriptor) (FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor  fd)
          Throws a SecurityException if the calling thread is not allowed to read from the specified file descriptor.
 void checkRead sample code for java.lang.SecurityManager.checkRead(java.lang.String) definition code for java.lang.SecurityManager.checkRead(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  file)
          Throws a SecurityException if the calling thread is not allowed to read the file specified by the string argument.
 void checkRead sample code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object) definition code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object) (String sample code for java.lang.String definition code for java.lang.String  file, Object sample code for java.lang.Object definition code for java.lang.Object  context)
          Throws a SecurityException if the specified security context is not allowed to read the file specified by the string argument.
 void checkSecurityAccess sample code for java.lang.SecurityManager.checkSecurityAccess(java.lang.String) definition code for java.lang.SecurityManager.checkSecurityAccess(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  target)
          Determines whether the permission with the specified permission target name should be granted or denied.
 void checkSetFactory sample code for java.lang.SecurityManager.checkSetFactory() definition code for java.lang.SecurityManager.checkSetFactory() ()
          Throws a SecurityException if the calling thread is not allowed to set the socket factory used by ServerSocket or Socket, or the stream handler factory used by URL.
 void checkSystemClipboardAccess sample code for java.lang.SecurityManager.checkSystemClipboardAccess() definition code for java.lang.SecurityManager.checkSystemClipboardAccess() ()
          Throws a SecurityException if the calling thread is not allowed to access the system clipboard.
 boolean checkTopLevelWindow sample code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object) definition code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object) (Object sample code for java.lang.Object definition code for java.lang.Object  window)
          Returns false if the calling thread is not trusted to bring up the top-level window indicated by the window argument.
 void checkWrite sample code for java.lang.SecurityManager.checkWrite(java.io.FileDescriptor) definition code for java.lang.SecurityManager.checkWrite(java.io.FileDescriptor) (FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor  fd)
          Throws a SecurityException if the calling thread is not allowed to write to the specified file descriptor.
 void checkWrite sample code for java.lang.SecurityManager.checkWrite(java.lang.String) definition code for java.lang.SecurityManager.checkWrite(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  file)
          Throws a SecurityException if the calling thread is not allowed to write to the file specified by the string argument.
protected  int classDepth sample code for java.lang.SecurityManager.classDepth(java.lang.String) definition code for java.lang.SecurityManager.classDepth(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  name)
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
protected  int classLoaderDepth sample code for java.lang.SecurityManager.classLoaderDepth() definition code for java.lang.SecurityManager.classLoaderDepth() ()
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
protected  ClassLoader sample code for java.lang.ClassLoader definition code for java.lang.ClassLoader currentClassLoader sample code for java.lang.SecurityManager.currentClassLoader() definition code for java.lang.SecurityManager.currentClassLoader() ()
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
protected  Class sample code for java.lang.Class definition code for java.lang.Class <?> currentLoadedClass sample code for java.lang.SecurityManager.currentLoadedClass() definition code for java.lang.SecurityManager.currentLoadedClass() ()
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
protected  Class sample code for java.lang.Class definition code for java.lang.Class [] getClassContext sample code for java.lang.SecurityManager.getClassContext() definition code for java.lang.SecurityManager.getClassContext() ()
          Returns the current execution stack as an array of classes.
 boolean getInCheck sample code for java.lang.SecurityManager.getInCheck() definition code for java.lang.SecurityManager.getInCheck() ()
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
 Object sample code for java.lang.Object definition code for java.lang.Object getSecurityContext sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext() ()
          Creates an object that encapsulates the current execution environment.
 ThreadGroup sample code for java.lang.ThreadGroup definition code for java.lang.ThreadGroup getThreadGroup sample code for java.lang.SecurityManager.getThreadGroup() definition code for java.lang.SecurityManager.getThreadGroup() ()
          Returns the thread group into which to instantiate any new thread being created at the time this is being called.
protected  boolean inClass sample code for java.lang.SecurityManager.inClass(java.lang.String) definition code for java.lang.SecurityManager.inClass(java.lang.String) (String sample code for java.lang.String definition code for java.lang.String  name)
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
protected  boolean inClassLoader sample code for java.lang.SecurityManager.inClassLoader() definition code for java.lang.SecurityManager.inClassLoader() ()
          Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
 
Methods inherited from class java.lang.Object sample code for java.lang.Object definition code for java.lang.Object
clone sample code for java.lang.Object.clone() definition code for java.lang.Object.clone() , equals sample code for java.lang.Object.equals(java.lang.Object) definition code for java.lang.Object.equals(java.lang.Object) , finalize sample code for java.lang.Object.finalize() definition code for java.lang.Object.finalize() , getClass sample code for java.lang.Object.getClass() definition code for java.lang.Object.getClass() , hashCode sample code for java.lang.Object.hashCode() definition code for java.lang.Object.hashCode() , notify sample code for java.lang.Object.notify() definition code for java.lang.Object.notify() , notifyAll sample code for java.lang.Object.notifyAll() definition code for java.lang.Object.notifyAll() , toString sample code for java.lang.Object.toString() definition code for java.lang.Object.toString() , wait sample code for java.lang.Object.wait() definition code for java.lang.Object.wait() , wait sample code for java.lang.Object.wait(long) definition code for java.lang.Object.wait(long) , wait sample code for java.lang.Object.wait(long, int) definition code for java.lang.Object.wait(long, int)
 

Field Detail

inCheck sample code for java.lang.SecurityManager.inCheck

@Deprecated
protected boolean inCheck
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.
This field is true if there is a security check in progress; false otherwise.

Constructor Detail

SecurityManager sample code for java.lang.SecurityManager() definition code for java.lang.SecurityManager()

public SecurityManager()
Constructs a new SecurityManager.

If there is a security manager already installed, this method first calls the security manager's checkPermission method with the RuntimePermission("createSecurityManager") permission to ensure the calling thread has permission to create a new security manager. This may result in throwing a SecurityException.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if a security manager already exists and its checkPermission method doesn't allow creation of a new security manager.
See Also:
System.getSecurityManager() sample code for java.lang.System.getSecurityManager() definition code for java.lang.System.getSecurityManager() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission) , RuntimePermission sample code for java.lang.RuntimePermission definition code for java.lang.RuntimePermission
Method Detail

getInCheck sample code for java.lang.SecurityManager.getInCheck() definition code for java.lang.SecurityManager.getInCheck()

@Deprecated
public boolean getInCheck()
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Tests if there is a security check in progress.

Returns:
the value of the inCheck field. This field should contain true if a security check is in progress, false otherwise.
See Also:
inCheck sample code for java.lang.SecurityManager.inCheck definition code for java.lang.SecurityManager.inCheck

getClassContext sample code for java.lang.SecurityManager.getClassContext() definition code for java.lang.SecurityManager.getClassContext()

protected Class sample code for java.lang.Class definition code for java.lang.Class [] getClassContext()
Returns the current execution stack as an array of classes.

The length of the array is the number of methods on the execution stack. The element at index 0 is the class of the currently executing method, the element at index 1 is the class of that method's caller, and so on.

Returns:
the execution stack.

currentClassLoader sample code for java.lang.SecurityManager.currentClassLoader() definition code for java.lang.SecurityManager.currentClassLoader()

@Deprecated
protected ClassLoader sample code for java.lang.ClassLoader definition code for java.lang.ClassLoader  currentClassLoader()
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Returns the class loader of the most recently executing method from a class defined using a non-system class loader. A non-system class loader is defined as being a class loader that is not equal to the system class loader (as returned by ClassLoader.getSystemClassLoader() sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() ) or one of its ancestors.

This method will return null in the following three cases:

  1. All methods on the execution stack are from classes defined using the system class loader or one of its ancestors.
  2. All methods on the execution stack up to the first "privileged" caller (see AccessController.doPrivileged(java.security.PrivilegedAction) sample code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) definition code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) ) are from classes defined using the system class loader or one of its ancestors.
  3. A call to checkPermission with java.security.AllPermission does not result in a SecurityException.

Returns:
the class loader of the most recent occurrence on the stack of a method from a class defined using a non-system class loader.
See Also:
getSystemClassLoader sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

currentLoadedClass sample code for java.lang.SecurityManager.currentLoadedClass() definition code for java.lang.SecurityManager.currentLoadedClass()

@Deprecated
protected Class sample code for java.lang.Class definition code for java.lang.Class <?> currentLoadedClass()
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Returns the class of the most recently executing method from a class defined using a non-system class loader. A non-system class loader is defined as being a class loader that is not equal to the system class loader (as returned by ClassLoader.getSystemClassLoader() sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() ) or one of its ancestors.

This method will return null in the following three cases:

  1. All methods on the execution stack are from classes defined using the system class loader or one of its ancestors.
  2. All methods on the execution stack up to the first "privileged" caller (see AccessController.doPrivileged(java.security.PrivilegedAction) sample code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) definition code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) ) are from classes defined using the system class loader or one of its ancestors.
  3. A call to checkPermission with java.security.AllPermission does not result in a SecurityException.

Returns:
the class of the most recent occurrence on the stack of a method from a class defined using a non-system class loader.
See Also:
getSystemClassLoader sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

classDepth sample code for java.lang.SecurityManager.classDepth(java.lang.String) definition code for java.lang.SecurityManager.classDepth(java.lang.String)

@Deprecated
protected int classDepth(String sample code for java.lang.String definition code for java.lang.String  name)
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Returns the stack depth of the specified class.

Parameters:
name - the fully qualified name of the class to search for.
Returns:
the depth on the stack frame of the first occurrence of a method from a class with the specified name; -1 if such a frame cannot be found.

classLoaderDepth sample code for java.lang.SecurityManager.classLoaderDepth() definition code for java.lang.SecurityManager.classLoaderDepth()

@Deprecated
protected int classLoaderDepth()
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Returns the stack depth of the most recently executing method from a class defined using a non-system class loader. A non-system class loader is defined as being a class loader that is not equal to the system class loader (as returned by ClassLoader.getSystemClassLoader() sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() ) or one of its ancestors.

This method will return -1 in the following three cases:

  1. All methods on the execution stack are from classes defined using the system class loader or one of its ancestors.
  2. All methods on the execution stack up to the first "privileged" caller (see AccessController.doPrivileged(java.security.PrivilegedAction) sample code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) definition code for java.security.AccessController.doPrivileged(java.security.PrivilegedAction) ) are from classes defined using the system class loader or one of its ancestors.
  3. A call to checkPermission with java.security.AllPermission does not result in a SecurityException.

Returns:
the depth on the stack frame of the most recent occurrence of a method from a class defined using a non-system class loader.
See Also:
getSystemClassLoader sample code for java.lang.ClassLoader.getSystemClassLoader() definition code for java.lang.ClassLoader.getSystemClassLoader() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

inClass sample code for java.lang.SecurityManager.inClass(java.lang.String) definition code for java.lang.SecurityManager.inClass(java.lang.String)

@Deprecated
protected boolean inClass(String sample code for java.lang.String definition code for java.lang.String  name)
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Tests if a method from a class with the specified name is on the execution stack.

Parameters:
name - the fully qualified name of the class.
Returns:
true if a method from a class with the specified name is on the execution stack; false otherwise.

inClassLoader sample code for java.lang.SecurityManager.inClassLoader() definition code for java.lang.SecurityManager.inClassLoader()

@Deprecated
protected boolean inClassLoader()
Deprecated. This type of security checking is not recommended. It is recommended that the checkPermission call be used instead.

Basically, tests if a method from a class defined using a class loader is on the execution stack.

Returns:
true if a call to currentClassLoader has a non-null return value.
See Also:
currentClassLoader sample code for java.lang.SecurityManager.currentClassLoader() definition code for java.lang.SecurityManager.currentClassLoader()

getSecurityContext sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext()

public Object sample code for java.lang.Object definition code for java.lang.Object  getSecurityContext()
Creates an object that encapsulates the current execution environment. The result of this method is used, for example, by the three-argument checkConnect method and by the two-argument checkRead method. These methods are needed because a trusted method may be called on to read a file or open a socket on behalf of another method. The trusted method needs to determine if the other (possibly untrusted) method would be allowed to perform the operation on its own.

The default implementation of this method is to return an AccessControlContext object.

Returns:
an implementation-dependent object that encapsulates sufficient information about the current execution environment to perform some security checks later.
See Also:
checkConnect sample code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object) definition code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object) , checkRead sample code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object) definition code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object) , AccessControlContext sample code for java.security.AccessControlContext definition code for java.security.AccessControlContext

checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

public void checkPermission(Permission sample code for java.security.Permission definition code for java.security.Permission  perm)
Throws a SecurityException if the requested access, specified by the given permission, is not permitted based on the security policy currently in effect.

This method calls AccessController.checkPermission with the given permission.

Parameters:
perm - the requested permission.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if access is not permitted based on the current security policy.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the permission argument is null.
Since:
1.2

checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission, java.lang.Object)

public void checkPermission(Permission sample code for java.security.Permission definition code for java.security.Permission  perm,
                            Object sample code for java.lang.Object definition code for java.lang.Object  context)
Throws a SecurityException if the specified security context is denied access to the resource specified by the given permission. The context must be a security context returned by a previous call to getSecurityContext and the access control decision is based upon the configured security policy for that security context.

If context is an instance of AccessControlContext then the AccessControlContext.checkPermission method is invoked with the specified permission.

If context is not an instance of AccessControlContext then a SecurityException is thrown.

Parameters:
perm - the specified permission
context - a system-dependent security context.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the specified security context is not an instance of AccessControlContext (e.g., is null), or is denied access to the resource specified by the given permission.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the permission argument is null.
Since:
1.2
See Also:
getSecurityContext() sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext() , AccessControlContext.checkPermission(java.security.Permission) sample code for java.security.AccessControlContext.checkPermission(java.security.Permission) definition code for java.security.AccessControlContext.checkPermission(java.security.Permission)

checkCreateClassLoader sample code for java.lang.SecurityManager.checkCreateClassLoader() definition code for java.lang.SecurityManager.checkCreateClassLoader()

public void checkCreateClassLoader()
Throws a SecurityException if the calling thread is not allowed to create a new class loader.

This method calls checkPermission with the RuntimePermission("createClassLoader") permission.

If you override this method, then you should make a call to super.checkCreateClassLoader at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to create a new class loader.
See Also:
ClassLoader.ClassLoader() sample code for java.lang.ClassLoader.ClassLoader() definition code for java.lang.ClassLoader.ClassLoader() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkAccess sample code for java.lang.SecurityManager.checkAccess(java.lang.Thread) definition code for java.lang.SecurityManager.checkAccess(java.lang.Thread)

public void checkAccess(Thread sample code for java.lang.Thread definition code for java.lang.Thread  t)
Throws a SecurityException if the calling thread is not allowed to modify the thread argument.

This method is invoked for the current security manager by the stop, suspend, resume, setPriority, setName, and setDaemon methods of class Thread.

If the thread argument is a system thread (belongs to the thread group with a null parent) then this method calls checkPermission with the RuntimePermission("modifyThread") permission. If the thread argument is not a system thread, this method just returns silently.

Applications that want a stricter policy should override this method. If this method is overridden, the method that overrides it should additionally check to see if the calling thread has the RuntimePermission("modifyThread") permission, and if so, return silently. This is to ensure that code granted that permission (such as the JDK itself) is allowed to manipulate any thread.

If this method is overridden, then super.checkAccess should be called by the first statement in the overridden method, or the equivalent security check should be placed in the overridden method.

Parameters:
t - the thread to be checked.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to modify the thread.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the thread argument is null.
See Also:
resume sample code for java.lang.Thread.resume() definition code for java.lang.Thread.resume() , setDaemon sample code for java.lang.Thread.setDaemon(boolean) definition code for java.lang.Thread.setDaemon(boolean) , setName sample code for java.lang.Thread.setName(java.lang.String) definition code for java.lang.Thread.setName(java.lang.String) , setPriority sample code for java.lang.Thread.setPriority(int) definition code for java.lang.Thread.setPriority(int) , stop sample code for java.lang.Thread.stop() definition code for java.lang.Thread.stop() , suspend sample code for java.lang.Thread.suspend() definition code for java.lang.Thread.suspend() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkAccess sample code for java.lang.SecurityManager.checkAccess(java.lang.ThreadGroup) definition code for java.lang.SecurityManager.checkAccess(java.lang.ThreadGroup)

public void checkAccess(ThreadGroup sample code for java.lang.ThreadGroup definition code for java.lang.ThreadGroup  g)
Throws a SecurityException if the calling thread is not allowed to modify the thread group argument.

This method is invoked for the current security manager when a new child thread or child thread group is created, and by the setDaemon, setMaxPriority, stop, suspend, resume, and destroy methods of class ThreadGroup.

If the thread group argument is the system thread group ( has a null parent) then this method calls checkPermission with the RuntimePermission("modifyThreadGroup") permission. If the thread group argument is not the system thread group, this method just returns silently.

Applications that want a stricter policy should override this method. If this method is overridden, the method that overrides it should additionally check to see if the calling thread has the RuntimePermission("modifyThreadGroup") permission, and if so, return silently. This is to ensure that code granted that permission (such as the JDK itself) is allowed to manipulate any thread.

If this method is overridden, then super.checkAccess should be called by the first statement in the overridden method, or the equivalent security check should be placed in the overridden method.

Parameters:
g - the thread group to be checked.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to modify the thread group.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the thread group argument is null.
See Also:
destroy sample code for java.lang.ThreadGroup.destroy() definition code for java.lang.ThreadGroup.destroy() , resume sample code for java.lang.ThreadGroup.resume() definition code for java.lang.ThreadGroup.resume() , setDaemon sample code for java.lang.ThreadGroup.setDaemon(boolean) definition code for java.lang.ThreadGroup.setDaemon(boolean) , setMaxPriority sample code for java.lang.ThreadGroup.setMaxPriority(int) definition code for java.lang.ThreadGroup.setMaxPriority(int) , stop sample code for java.lang.ThreadGroup.stop() definition code for java.lang.ThreadGroup.stop() , suspend sample code for java.lang.ThreadGroup.suspend() definition code for java.lang.ThreadGroup.suspend() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkExit sample code for java.lang.SecurityManager.checkExit(int) definition code for java.lang.SecurityManager.checkExit(int)

public void checkExit(int status)
Throws a SecurityException if the calling thread is not allowed to cause the Java Virtual Machine to halt with the specified status code.

This method is invoked for the current security manager by the exit method of class Runtime. A status of 0 indicates success; other values indicate various errors.

This method calls checkPermission with the RuntimePermission("exitVM") permission.

If you override this method, then you should make a call to super.checkExit at the point the overridden method would normally throw an exception.

Parameters:
status - the exit status.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to halt the Java Virtual Machine with the specified status.
See Also:
exit sample code for java.lang.Runtime.exit(int) definition code for java.lang.Runtime.exit(int) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkExec sample code for java.lang.SecurityManager.checkExec(java.lang.String) definition code for java.lang.SecurityManager.checkExec(java.lang.String)

public void checkExec(String sample code for java.lang.String definition code for java.lang.String  cmd)
Throws a SecurityException if the calling thread is not allowed to create a subprocess.

This method is invoked for the current security manager by the exec methods of class Runtime.

This method calls checkPermission with the FilePermission(cmd,"execute") permission if cmd is an absolute path, otherwise it calls checkPermission with FilePermission("<<ALL FILES>>","execute").

If you override this method, then you should make a call to super.checkExec at the point the overridden method would normally throw an exception.

Parameters:
cmd - the specified system command.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to create a subprocess.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the cmd argument is null.
See Also:
Runtime.exec(java.lang.String) sample code for java.lang.Runtime.exec(java.lang.String) definition code for java.lang.Runtime.exec(java.lang.String) , Runtime.exec(java.lang.String, java.lang.String[]) sample code for java.lang.Runtime.exec(java.lang.String, java.lang.String[]) definition code for java.lang.Runtime.exec(java.lang.String, java.lang.String[]) , Runtime.exec(java.lang.String[]) sample code for java.lang.Runtime.exec(java.lang.String[]) definition code for java.lang.Runtime.exec(java.lang.String[]) , Runtime.exec(java.lang.String[], java.lang.String[]) sample code for java.lang.Runtime.exec(java.lang.String[], java.lang.String[]) definition code for java.lang.Runtime.exec(java.lang.String[], java.lang.String[]) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkLink sample code for java.lang.SecurityManager.checkLink(java.lang.String) definition code for java.lang.SecurityManager.checkLink(java.lang.String)

public void checkLink(String sample code for java.lang.String definition code for java.lang.String  lib)
Throws a SecurityException if the calling thread is not allowed to dynamic link the library code specified by the string argument file. The argument is either a simple library name or a complete filename.

This method is invoked for the current security manager by methods load and loadLibrary of class Runtime.

This method calls checkPermission with the RuntimePermission("loadLibrary."+lib) permission.

If you override this method, then you should make a call to super.checkLink at the point the overridden method would normally throw an exception.

Parameters:
lib - the name of the library.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to dynamically link the library.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the lib argument is null.
See Also:
Runtime.load(java.lang.String) sample code for java.lang.Runtime.load(java.lang.String) definition code for java.lang.Runtime.load(java.lang.String) , Runtime.loadLibrary(java.lang.String) sample code for java.lang.Runtime.loadLibrary(java.lang.String) definition code for java.lang.Runtime.loadLibrary(java.lang.String) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkRead sample code for java.lang.SecurityManager.checkRead(java.io.FileDescriptor) definition code for java.lang.SecurityManager.checkRead(java.io.FileDescriptor)

public void checkRead(FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor  fd)
Throws a SecurityException if the calling thread is not allowed to read from the specified file descriptor.

This method calls checkPermission with the RuntimePermission("readFileDescriptor") permission.

If you override this method, then you should make a call to super.checkRead at the point the overridden method would normally throw an exception.

Parameters:
fd - the system-dependent file descriptor.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified file descriptor.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file descriptor argument is null.
See Also:
FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkRead sample code for java.lang.SecurityManager.checkRead(java.lang.String) definition code for java.lang.SecurityManager.checkRead(java.lang.String)

public void checkRead(String sample code for java.lang.String definition code for java.lang.String  file)
Throws a SecurityException if the calling thread is not allowed to read the file specified by the string argument.

This method calls checkPermission with the FilePermission(file,"read") permission.

If you override this method, then you should make a call to super.checkRead at the point the overridden method would normally throw an exception.

Parameters:
file - the system-dependent file name.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified file.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file argument is null.
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkRead sample code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object) definition code for java.lang.SecurityManager.checkRead(java.lang.String, java.lang.Object)

public void checkRead(String sample code for java.lang.String definition code for java.lang.String  file,
                      Object sample code for java.lang.Object definition code for java.lang.Object  context)
Throws a SecurityException if the specified security context is not allowed to read the file specified by the string argument. The context must be a security context returned by a previous call to getSecurityContext.

If context is an instance of AccessControlContext then the AccessControlContext.checkPermission method will be invoked with the FilePermission(file,"read") permission.

If context is not an instance of AccessControlContext then a SecurityException is thrown.

If you override this method, then you should make a call to super.checkRead at the point the overridden method would normally throw an exception.

Parameters:
file - the system-dependent filename.
context - a system-dependent security context.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the specified security context is not an instance of AccessControlContext (e.g., is null), or does not have permission to read the specified file.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file argument is null.
See Also:
getSecurityContext() sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext() , AccessControlContext.checkPermission(java.security.Permission) sample code for java.security.AccessControlContext.checkPermission(java.security.Permission) definition code for java.security.AccessControlContext.checkPermission(java.security.Permission)

checkWrite sample code for java.lang.SecurityManager.checkWrite(java.io.FileDescriptor) definition code for java.lang.SecurityManager.checkWrite(java.io.FileDescriptor)

public void checkWrite(FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor  fd)
Throws a SecurityException if the calling thread is not allowed to write to the specified file descriptor.

This method calls checkPermission with the RuntimePermission("writeFileDescriptor") permission.

If you override this method, then you should make a call to super.checkWrite at the point the overridden method would normally throw an exception.

Parameters:
fd - the system-dependent file descriptor.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified file descriptor.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file descriptor argument is null.
See Also:
FileDescriptor sample code for java.io.FileDescriptor definition code for java.io.FileDescriptor , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkWrite sample code for java.lang.SecurityManager.checkWrite(java.lang.String) definition code for java.lang.SecurityManager.checkWrite(java.lang.String)

public void checkWrite(String sample code for java.lang.String definition code for java.lang.String  file)
Throws a SecurityException if the calling thread is not allowed to write to the file specified by the string argument.

This method calls checkPermission with the FilePermission(file,"write") permission.

If you override this method, then you should make a call to super.checkWrite at the point the overridden method would normally throw an exception.

Parameters:
file - the system-dependent filename.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified file.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file argument is null.
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkDelete sample code for java.lang.SecurityManager.checkDelete(java.lang.String) definition code for java.lang.SecurityManager.checkDelete(java.lang.String)

public void checkDelete(String sample code for java.lang.String definition code for java.lang.String  file)
Throws a SecurityException if the calling thread is not allowed to delete the specified file.

This method is invoked for the current security manager by the delete method of class File.

This method calls checkPermission with the FilePermission(file,"delete") permission.

If you override this method, then you should make a call to super.checkDelete at the point the overridden method would normally throw an exception.

Parameters:
file - the system-dependent filename.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to delete the file.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the file argument is null.
See Also:
File.delete() sample code for java.io.File.delete() definition code for java.io.File.delete() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkConnect sample code for java.lang.SecurityManager.checkConnect(java.lang.String, int) definition code for java.lang.SecurityManager.checkConnect(java.lang.String, int)

public void checkConnect(String sample code for java.lang.String definition code for java.lang.String  host,
                         int port)
Throws a SecurityException if the calling thread is not allowed to open a socket connection to the specified host and port number.

A port number of -1 indicates that the calling method is attempting to determine the IP address of the specified host name.

This method calls checkPermission with the SocketPermission(host+":"+port,"connect") permission if the port is not equal to -1. If the port is equal to -1, then it calls checkPermission with the SocketPermission(host,"resolve") permission.

If you override this method, then you should make a call to super.checkConnect at the point the overridden method would normally throw an exception.

Parameters:
host - the host name port to connect to.
port - the protocol port to connect to.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to open a socket connection to the specified host and port.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the host argument is null.
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkConnect sample code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object) definition code for java.lang.SecurityManager.checkConnect(java.lang.String, int, java.lang.Object)

public void checkConnect(String sample code for java.lang.String definition code for java.lang.String  host,
                         int port,
                         Object sample code for java.lang.Object definition code for java.lang.Object  context)
Throws a SecurityException if the specified security context is not allowed to open a socket connection to the specified host and port number.

A port number of -1 indicates that the calling method is attempting to determine the IP address of the specified host name.

If context is not an instance of AccessControlContext then a SecurityException is thrown.

Otherwise, the port number is checked. If it is not equal to -1, the context's checkPermission method is called with a SocketPermission(host+":"+port,"connect") permission. If the port is equal to -1, then the context's checkPermission method is called with a SocketPermission(host,"resolve") permission.

If you override this method, then you should make a call to super.checkConnect at the point the overridden method would normally throw an exception.

Parameters:
host - the host name port to connect to.
port - the protocol port to connect to.
context - a system-dependent security context.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the specified security context is not an instance of AccessControlContext (e.g., is null), or does not have permission to open a socket connection to the specified host and port.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the host argument is null.
See Also:
getSecurityContext() sample code for java.lang.SecurityManager.getSecurityContext() definition code for java.lang.SecurityManager.getSecurityContext() , AccessControlContext.checkPermission(java.security.Permission) sample code for java.security.AccessControlContext.checkPermission(java.security.Permission) definition code for java.security.AccessControlContext.checkPermission(java.security.Permission)

checkListen sample code for java.lang.SecurityManager.checkListen(int) definition code for java.lang.SecurityManager.checkListen(int)

public void checkListen(int port)
Throws a SecurityException if the calling thread is not allowed to wait for a connection request on the specified local port number.

If port is not 0, this method calls checkPermission with the SocketPermission("localhost:"+port,"listen"). If port is zero, this method calls checkPermission with SocketPermission("localhost:1024-","listen").

If you override this method, then you should make a call to super.checkListen at the point the overridden method would normally throw an exception.

Parameters:
port - the local port.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to listen on the specified port.
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkAccept sample code for java.lang.SecurityManager.checkAccept(java.lang.String, int) definition code for java.lang.SecurityManager.checkAccept(java.lang.String, int)

public void checkAccept(String sample code for java.lang.String definition code for java.lang.String  host,
                        int port)
Throws a SecurityException if the calling thread is not permitted to accept a socket connection from the specified host and port number.

This method is invoked for the current security manager by the accept method of class ServerSocket.

This method calls checkPermission with the SocketPermission(host+":"+port,"accept") permission.

If you override this method, then you should make a call to super.checkAccept at the point the overridden method would normally throw an exception.

Parameters:
host - the host name of the socket connection.
port - the port number of the socket connection.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to accept the connection.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the host argument is null.
See Also:
ServerSocket.accept() sample code for java.net.ServerSocket.accept() definition code for java.net.ServerSocket.accept() , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkMulticast sample code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress) definition code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress)

public void checkMulticast(InetAddress sample code for java.net.InetAddress definition code for java.net.InetAddress  maddr)
Throws a SecurityException if the calling thread is not allowed to use (join/leave/send/receive) IP multicast.

This method calls checkPermission with the java.net.SocketPermission(maddr.getHostAddress(), "accept,connect") permission.

If you override this method, then you should make a call to super.checkMulticast at the point the overridden method would normally throw an exception.

Parameters:
maddr - Internet group address to be used.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread is not allowed to use (join/leave/send/receive) IP multicast.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the address argument is null.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkMulticast sample code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress, byte) definition code for java.lang.SecurityManager.checkMulticast(java.net.InetAddress, byte)

@Deprecated
public void checkMulticast(InetAddress sample code for java.net.InetAddress definition code for java.net.InetAddress  maddr,
                                      byte ttl)
Deprecated. Use #checkPermission(java.security.Permission) instead

Throws a SecurityException if the calling thread is not allowed to use (join/leave/send/receive) IP multicast.

This method calls checkPermission with the java.net.SocketPermission(maddr.getHostAddress(), "accept,connect") permission.

If you override this method, then you should make a call to super.checkMulticast at the point the overridden method would normally throw an exception.

Parameters:
maddr - Internet group address to be used.
ttl - value in use, if it is multicast send. Note: this particular implementation does not use the ttl parameter.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread is not allowed to use (join/leave/send/receive) IP multicast.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the address argument is null.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkPropertiesAccess sample code for java.lang.SecurityManager.checkPropertiesAccess() definition code for java.lang.SecurityManager.checkPropertiesAccess()

public void checkPropertiesAccess()
Throws a SecurityException if the calling thread is not allowed to access or modify the system properties.

This method is used by the getProperties and setProperties methods of class System.

This method calls checkPermission with the PropertyPermission("*", "read,write") permission.

If you override this method, then you should make a call to super.checkPropertiesAccess at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access or modify the system properties.
See Also:
System.getProperties() sample code for java.lang.System.getProperties() definition code for java.lang.System.getProperties() , System.setProperties(java.util.Properties) sample code for java.lang.System.setProperties(java.util.Properties) definition code for java.lang.System.setProperties(java.util.Properties) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkPropertyAccess sample code for java.lang.SecurityManager.checkPropertyAccess(java.lang.String) definition code for java.lang.SecurityManager.checkPropertyAccess(java.lang.String)

public void checkPropertyAccess(String sample code for java.lang.String definition code for java.lang.String  key)
Throws a SecurityException if the calling thread is not allowed to access the system property with the specified key name.

This method is used by the getProperty method of class System.

This method calls checkPermission with the PropertyPermission(key, "read") permission.

If you override this method, then you should make a call to super.checkPropertyAccess at the point the overridden method would normally throw an exception.

Parameters:
key - a system property key.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified system property.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the key argument is null.
IllegalArgumentException sample code for java.lang.IllegalArgumentException definition code for java.lang.IllegalArgumentException - if key is empty.
See Also:
System.getProperty(java.lang.String) sample code for java.lang.System.getProperty(java.lang.String) definition code for java.lang.System.getProperty(java.lang.String) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkTopLevelWindow sample code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object) definition code for java.lang.SecurityManager.checkTopLevelWindow(java.lang.Object)

public boolean checkTopLevelWindow(Object sample code for java.lang.Object definition code for java.lang.Object  window)
Returns false if the calling thread is not trusted to bring up the top-level window indicated by the window argument. In this case, the caller can still decide to show the window, but the window should include some sort of visual warning. If the method returns true, then the window can be shown without any special restrictions.

See class Window for more information on trusted and untrusted windows.

This method calls checkPermission with the AWTPermission("showWindowWithoutWarningBanner") permission, and returns true if a SecurityException is not thrown, otherwise it returns false.

If you override this method, then you should make a call to super.checkTopLevelWindow at the point the overridden method would normally return false, and the value of super.checkTopLevelWindow should be returned.

Parameters:
window - the new window that is being created.
Returns:
true if the calling thread is trusted to put up top-level windows; false otherwise.
Throws:
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the window argument is null.
See Also:
Window sample code for java.awt.Window definition code for java.awt.Window , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkPrintJobAccess sample code for java.lang.SecurityManager.checkPrintJobAccess() definition code for java.lang.SecurityManager.checkPrintJobAccess()

public void checkPrintJobAccess()
Throws a SecurityException if the calling thread is not allowed to initiate a print job request.

This method calls checkPermission with the RuntimePermission("queuePrintJob") permission.

If you override this method, then you should make a call to super.checkPrintJobAccess at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to initiate a print job request.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkSystemClipboardAccess sample code for java.lang.SecurityManager.checkSystemClipboardAccess() definition code for java.lang.SecurityManager.checkSystemClipboardAccess()

public void checkSystemClipboardAccess()
Throws a SecurityException if the calling thread is not allowed to access the system clipboard.

This method calls checkPermission with the AWTPermission("accessClipboard") permission.

If you override this method, then you should make a call to super.checkSystemClipboardAccess at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the system clipboard.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkAwtEventQueueAccess sample code for java.lang.SecurityManager.checkAwtEventQueueAccess() definition code for java.lang.SecurityManager.checkAwtEventQueueAccess()

public void checkAwtEventQueueAccess()
Throws a SecurityException if the calling thread is not allowed to access the AWT event queue.

This method calls checkPermission with the AWTPermission("accessEventQueue") permission.

If you override this method, then you should make a call to super.checkAwtEventQueueAccess at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the AWT event queue.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkPackageAccess sample code for java.lang.SecurityManager.checkPackageAccess(java.lang.String) definition code for java.lang.SecurityManager.checkPackageAccess(java.lang.String)

public void checkPackageAccess(String sample code for java.lang.String definition code for java.lang.String  pkg)
Throws a SecurityException if the calling thread is not allowed to access the package specified by the argument.

This method is used by the loadClass method of class loaders.

This method first gets a list of restricted packages by obtaining a comma-separated list from a call to java.security.Security.getProperty("package.access"), and checks to see if pkg starts with or equals any of the restricted packages. If it does, then checkPermission gets called with the RuntimePermission("accessClassInPackage."+pkg) permission.

If this method is overridden, then super.checkPackageAccess should be called as the first line in the overridden method.

Parameters:
pkg - the package name.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to access the specified package.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the package name argument is null.
See Also:
loadClass sample code for java.lang.ClassLoader.loadClass(java.lang.String, boolean) definition code for java.lang.ClassLoader.loadClass(java.lang.String, boolean) , getProperty sample code for java.security.Security.getProperty(java.lang.String) definition code for java.security.Security.getProperty(java.lang.String) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkPackageDefinition sample code for java.lang.SecurityManager.checkPackageDefinition(java.lang.String) definition code for java.lang.SecurityManager.checkPackageDefinition(java.lang.String)

public void checkPackageDefinition(String sample code for java.lang.String definition code for java.lang.String  pkg)
Throws a SecurityException if the calling thread is not allowed to define classes in the package specified by the argument.

This method is used by the loadClass method of some class loaders.

This method first gets a list of restricted packages by obtaining a comma-separated list from a call to java.security.Security.getProperty("package.definition"), and checks to see if pkg starts with or equals any of the restricted packages. If it does, then checkPermission gets called with the RuntimePermission("defineClassInPackage."+pkg) permission.

If this method is overridden, then super.checkPackageDefinition should be called as the first line in the overridden method.

Parameters:
pkg - the package name.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to define classes in the specified package.
See Also:
ClassLoader.loadClass(java.lang.String, boolean) sample code for java.lang.ClassLoader.loadClass(java.lang.String, boolean) definition code for java.lang.ClassLoader.loadClass(java.lang.String, boolean) , getProperty sample code for java.security.Security.getProperty(java.lang.String) definition code for java.security.Security.getProperty(java.lang.String) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkSetFactory sample code for java.lang.SecurityManager.checkSetFactory() definition code for java.lang.SecurityManager.checkSetFactory()

public void checkSetFactory()
Throws a SecurityException if the calling thread is not allowed to set the socket factory used by ServerSocket or Socket, or the stream handler factory used by URL.

This method calls checkPermission with the RuntimePermission("setFactory") permission.

If you override this method, then you should make a call to super.checkSetFactory at the point the overridden method would normally throw an exception.

Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission to specify a socket factory or a stream handler factory.
See Also:
setSocketFactory sample code for java.net.ServerSocket.setSocketFactory(java.net.SocketImplFactory) definition code for java.net.ServerSocket.setSocketFactory(java.net.SocketImplFactory) , setSocketImplFactory sample code for java.net.Socket.setSocketImplFactory(java.net.SocketImplFactory) definition code for java.net.Socket.setSocketImplFactory(java.net.SocketImplFactory) , setURLStreamHandlerFactory sample code for java.net.URL.setURLStreamHandlerFactory(java.net.URLStreamHandlerFactory) definition code for java.net.URL.setURLStreamHandlerFactory(java.net.URLStreamHandlerFactory) , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkMemberAccess sample code for java.lang.SecurityManager.checkMemberAccess(java.lang.Class<?>, int) definition code for java.lang.SecurityManager.checkMemberAccess(java.lang.Class<?>, int)

public void checkMemberAccess(Class sample code for java.lang.Class definition code for java.lang.Class <?> clazz,
                              int which)
Throws a SecurityException if the calling thread is not allowed to access members.

The default policy is to allow access to PUBLIC members, as well as access to classes that have the same class loader as the caller. In all other cases, this method calls checkPermission with the RuntimePermission("accessDeclaredMembers") permission.

If this method is overridden, then a call to super.checkMemberAccess cannot be made, as the default implementation of checkMemberAccess relies on the code being checked being at a stack depth of 4.

Parameters:
clazz - the class that reflection is to be performed on.
which - type of access, PUBLIC or DECLARED.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the caller does not have permission to access members.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if the clazz argument is null.
Since:
JDK1.1
See Also:
Member sample code for java.lang.reflect.Member definition code for java.lang.reflect.Member , checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

checkSecurityAccess sample code for java.lang.SecurityManager.checkSecurityAccess(java.lang.String) definition code for java.lang.SecurityManager.checkSecurityAccess(java.lang.String)

public void checkSecurityAccess(String sample code for java.lang.String definition code for java.lang.String  target)
Determines whether the permission with the specified permission target name should be granted or denied.

If the requested permission is allowed, this method returns quietly. If denied, a SecurityException is raised.

This method creates a SecurityPermission object for the given permission target name and calls checkPermission with it.

See the documentation for SecurityPermission sample code for java.security.SecurityPermission definition code for java.security.SecurityPermission for a list of possible permission target names.

If you override this method, then you should make a call to super.checkSecurityAccess at the point the overridden method would normally throw an exception.

Parameters:
target - the target name of the SecurityPermission.
Throws:
SecurityException sample code for java.lang.SecurityException definition code for java.lang.SecurityException - if the calling thread does not have permission for the requested access.
NullPointerException sample code for java.lang.NullPointerException definition code for java.lang.NullPointerException - if target is null.
IllegalArgumentException sample code for java.lang.IllegalArgumentException definition code for java.lang.IllegalArgumentException - if target is empty.
Since:
JDK1.1
See Also:
checkPermission sample code for java.lang.SecurityManager.checkPermission(java.security.Permission) definition code for java.lang.SecurityManager.checkPermission(java.security.Permission)

getThreadGroup sample code for java.lang.SecurityManager.getThreadGroup() definition code for java.lang.SecurityManager.getThreadGroup()

public ThreadGroup sample code for java.lang.ThreadGroup definition code for java.lang.ThreadGroup  getThreadGroup()
Returns the thread group into which to instantiate any new thread being created at the time this is being called. By default, it returns the thread group of the current thread. This should be overridden by a specific security manager to return the appropriate thread group.

Returns:
ThreadGroup that new threads are instantiated into
Since:
JDK1.1
See Also:
ThreadGroup sample code for java.lang.ThreadGroup definition code for java.lang.ThreadGroup