Inside Java™ 2 Platform Security: Architecture, API Design, and Implementation, Second Edition

7.3. Customizing the Access Control Context

When we first introduced the DomainCombiner in Section 6.3, we described the API and the relationship of a DomainCombiner to the access control machinery. The remainder of this chapter describes possible uses for a DomainCombiner and implementation strategies. We may use the term combiner as a shorthand for DomainCombiner.

Two steps must be taken to insert a combiner into the access control machinery of the Java runtime environment. The first is to construct an AccessControlContext with an instance of a DomainCombiner. The second step is to bind the security context with the execution context. This is accomplished by supplying the AccessControlContext to the appropriate AccessController doPrivileged ...