/* * Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved. * ORACLE PROPRIETARY/CONFIDENTIAL. Use is subject to license terms. * * * * * * * * * * * * * * * * * * * * */ package java.sql; import java.security.*; /** * The permission for which the SecurityManager will check * when code that is running in an applet, or an application with a * SecurityManager enabled, calls the * DriverManager.setLogWriter method, * DriverManager.setLogStream (deprecated) method, * {@code SyncFactory.setJNDIContext} method, * {@code SyncFactory.setLogger} method, * {@code Connection.setNetworktimeout} method, * or the Connection.abort method. * If there is no SQLPermission object, these methods * throw a java.lang.SecurityException as a runtime exception. *

* A SQLPermission object contains * a name (also referred to as a "target name") but no actions * list; there is either a named permission or there is not. * The target name is the name of the permission (see below). The * naming convention follows the hierarchical property naming convention. * In addition, an asterisk * may appear at the end of the name, following a ".", or by itself, to * signify a wildcard match. For example: loadLibrary.* * or * is valid, * but *loadLibrary or a*b is not valid. *

* The following table lists all the possible SQLPermission target names. * The table gives a description of what the permission allows * and a discussion of the risks of granting code the permission. *

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Permission Target NameWhat the Permission AllowsRisks of Allowing this Permission
setLogSetting of the logging streamThis is a dangerous permission to grant. * The contents of the log may contain usernames and passwords, * SQL statements, and SQL data.
callAbortAllows the invocation of the {@code Connection} method * {@code abort}Permits an application to terminate a physical connection to a * database.
setSyncFactoryAllows the invocation of the {@code SyncFactory} methods * {@code setJNDIContext} and {@code setLogger}Permits an application to specify the JNDI context from which the * {@code SyncProvider} implementations can be retrieved from and the logging * object to be used by the {@code SyncProvider} implementation.
setNetworkTimeoutAllows the invocation of the {@code Connection} method * {@code setNetworkTimeout}Permits an application to specify the maximum period a * Connection or * objects created from the Connection * will wait for the database to reply to any one request.
*

* The person running an applet decides what permissions to allow * and will run the Policy Tool to create an * SQLPermission in a policy file. A programmer does * not use a constructor directly to create an instance of SQLPermission * but rather uses a tool. * @since 1.3 * @see java.security.BasicPermission * @see java.security.Permission * @see java.security.Permissions * @see java.security.PermissionCollection * @see java.lang.SecurityManager * */ public final class SQLPermission extends BasicPermission { /** * Creates a new SQLPermission object with the specified name. * The name is the symbolic name of the SQLPermission. * * @param name the name of this SQLPermission object, which must * be either {@code setLog}, {@code callAbort}, {@code setSyncFactory}, * or {@code setNetworkTimeout} * @throws NullPointerException if name is null. * @throws IllegalArgumentException if name is empty. */ public SQLPermission(String name) { super(name); } /** * Creates a new SQLPermission object with the specified name. * The name is the symbolic name of the SQLPermission; the * actions String is currently unused and should be * null. * * @param name the name of this SQLPermission object, which must * be either {@code setLog}, {@code callAbort}, {@code setSyncFactory}, * or {@code setNetworkTimeout} * @param actions should be null * @throws NullPointerException if name is null. * @throws IllegalArgumentException if name is empty. */ public SQLPermission(String name, String actions) { super(name, actions); } /** * Private serial version unique ID to ensure serialization * compatibility. */ static final long serialVersionUID = -1439323187199563495L; }