Java Security Classes

To explain the implementation of Java security we must first understand several key terms. Java system security, in a nutshell, is concerned with protection domains as implemented by the java.security.ProtectionDomain class. A protection domain associates a code source (java.security.CodeSource) with a principal (java.security.Principal) and also associates a code source with a set of permissible actions (java.security.Permission) (see Figure 8-1).

A code source (CodeSource) represents the location where the code was loaded, what is commonly known as a codebase (java.net.URL). This could be a local file system or a network location. Associated with the code source are principals represented by the security certificates. ...

Get J2EE™ and Beyond: Design, Develop, and Deploy World-Class Java™ Software now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.