All Downloads are FREE. Search and download functionalities are using the official Maven repository.
  • Log In
  • Register

    • com.hazelcast.sql.impl.expression.UntrustedExpressionEvalContext Maven / Gradle / Ivy

    There is a newer version: 5.5.0
    Show newest version
    /*
 * Copyright 2024 Hazelcast Inc.
 *
 * Licensed under the Hazelcast Community License (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://hazelcast.com/hazelcast-community-license
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.hazelcast.sql.impl.expression;

import com.hazelcast.internal.serialization.InternalSerializationService;
import com.hazelcast.spi.impl.NodeEngine;

import javax.annotation.Nonnull;
import javax.annotation.Nullable;
import javax.security.auth.Subject;
import java.security.Permission;
import java.util.List;

import static java.util.Objects.requireNonNull;

/**
 * Specifies an untrusted context for assessing expressions.
 * Contains identical information as the trusted context {@code ExpressionEvalContextImpl}, except for the security context.
 * If an attempt is made to acquire a security context, an exception will be raised,
 * indicating that the context lacks trust.
 * This class is utilized in scenarios where obtaining a trusted security context is unfeasible.
 */
public final class UntrustedExpressionEvalContext
        implements ExpressionEvalContext {
    private final List arguments;
    private final transient InternalSerializationService serializationService;
    private final transient NodeEngine nodeEngine;

    public UntrustedExpressionEvalContext(
            @Nonnull List arguments,
            @Nonnull InternalSerializationService serializationService,
            @Nonnull NodeEngine nodeEngine) {
        this.arguments = requireNonNull(arguments);
        this.serializationService = requireNonNull(serializationService);
        this.nodeEngine = requireNonNull(nodeEngine);
    }

    public static UntrustedExpressionEvalContext from(ExpressionEvalContext context) {
        return new UntrustedExpressionEvalContext(
                context.getArguments(),
                context.getSerializationService(),
                context.getNodeEngine()
        );
    }

    @Override
    public Object getArgument(int index) {
        return arguments.get(index);
    }

    @Override
    public List getArguments() {
        return arguments;
    }

    @Override
    public InternalSerializationService getSerializationService() {
        return serializationService;
    }

    @Override
    public UntrustedExpressionEvalContext withSerializationService(@Nonnull InternalSerializationService newService) {
        if (serializationService == newService) {
            return this;
        }
        return new UntrustedExpressionEvalContext(
                arguments,
                newService,
                nodeEngine
        );
    }

    @Override
    public NodeEngine getNodeEngine() {
        return nodeEngine;
    }

    @Override
    public void checkPermission(Permission permission) {
        if (isSecurityEnabled()) {
            throw new SecurityException("Unable to employ sensitive functions in untrusted invocations.");
        }
    }

    @Override
    @Nullable
    public Subject subject() {
        if (isSecurityEnabled()) {
            throw new SecurityException("Unable to employ sensitive functions in untrusted invocations.");
        }
        return null;
    }

    private boolean isSecurityEnabled() {
        return nodeEngine.getConfig().getSecurityConfig().isEnabled();
    }
}
    
    
    
    

    




    
    
    © 2015 - 2024 Weber Informatics LLC | Privacy Policy