org.infinispan.jmx.SecurityActions Maven / Gradle / Ivy
package org.infinispan.jmx;
import org.infinispan.security.Security;
import javax.management.MBeanServer;
import javax.management.ObjectName;
import javax.management.QueryExp;
import java.security.AccessController;
import java.security.PrivilegedAction;
import java.security.PrivilegedActionException;
import java.security.PrivilegedExceptionAction;
import java.util.Set;
/**
* SecurityActions for the org.infinispan.jmx package.
*
* Do not move. Do not change class and method visibility to avoid being called from other
* {@link java.security.CodeSource}s, thus granting privilege escalation to external code.
*
* @author Ingo Weiss
* @since 9.0
*/
final class SecurityActions {
private static T doPrivileged(PrivilegedAction action) {
return (System.getSecurityManager() != null) ? AccessController.doPrivileged(action) : Security.doPrivileged(action);
}
private static void doPrivileged(PrivilegedExceptionAction action) throws Exception {
try {
if (System.getSecurityManager() != null) {
AccessController.doPrivileged(action);
} else {
Security.doPrivileged(action);
}
} catch (PrivilegedActionException e) {
throw e.getException();
}
}
static void registerMBean(Object mbean, ObjectName objectName, MBeanServer mBeanServer) throws Exception {
doPrivileged(() -> {
mBeanServer.registerMBean(mbean, objectName);
return null;
});
}
static void unregisterMBean(ObjectName objectName, MBeanServer mBeanServer) throws Exception {
doPrivileged(() -> {
mBeanServer.unregisterMBean(objectName);
return null;
});
}
static Set queryNames(ObjectName target, QueryExp query, MBeanServer mBeanServer) {
return doPrivileged(() -> mBeanServer.queryNames(target, query));
}
private SecurityActions() {
// Hide
}
}