org.infinispan.server.tasks.SecurityActions Maven / Gradle / Ivy
package org.infinispan.server.tasks;
import java.security.AccessController;
import java.security.PrivilegedAction;
import org.infinispan.AdvancedCache;
import org.infinispan.factories.GlobalComponentRegistry;
import org.infinispan.manager.ClusterExecutor;
import org.infinispan.manager.EmbeddedCacheManager;
import org.infinispan.security.AuthorizationManager;
import org.infinispan.security.Security;
import org.infinispan.security.actions.GetCacheAuthorizationManagerAction;
import org.infinispan.security.actions.GetClusterExecutorAction;
import org.infinispan.security.actions.GetGlobalComponentRegistryAction;
/**
* SecurityActions for the org.infinispan.server.infinispan.task package.
*
* Do not move. Do not change class and method visibility to avoid being called from other {@link
* java.security.CodeSource}s, thus granting privilege escalation to external code.
*
* @since 10.0
*/
final class SecurityActions {
private SecurityActions() {
}
private static T doPrivileged(PrivilegedAction action) {
return System.getSecurityManager() != null ?
AccessController.doPrivileged(action) : Security.doPrivileged(action);
}
static ClusterExecutor getClusterExecutor(EmbeddedCacheManager embeddedCacheManager) {
return doPrivileged(new GetClusterExecutorAction(embeddedCacheManager));
}
static GlobalComponentRegistry getGlobalComponentRegistry(final EmbeddedCacheManager cacheManager) {
GetGlobalComponentRegistryAction action = new GetGlobalComponentRegistryAction(cacheManager);
return doPrivileged(action);
}
static AuthorizationManager getAuthorizationManager(AdvancedCache cache) {
GetCacheAuthorizationManagerAction action = new GetCacheAuthorizationManagerAction(cache);
return doPrivileged(action);
}
}