org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists

Class AclAwareWhitelist

java.lang.Object

org.jenkinsci.plugins.scriptsecurity.sandbox.Whitelist

org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists.AclAwareWhitelist

All Implemented Interfaces:

hudson.ExtensionPoint

public final class AclAwareWhitelist
extends Whitelist

Delegating whitelist which allows certain calls to be made only when a non-ACL.SYSTEM user is making them.

First there is a list of unrestricted signatures; these can always be run.

Then there is a (probably much smaller) list of restricted signatures. These can be run only when the current user is a real user or even Jenkins.ANONYMOUS, but not when ACL.SYSTEM. Restricted methods should be limited to those which actually perform a permissions check, typically using ACL.checkPermission(hudson.security.Permission). Allowing the system pseudo-user to run these would be dangerous, since we do not know “on whose behalf” a script is running, and this “user” is permitted to do anything.

Nested Class Summary

Nested classes/interfaces inherited from interface hudson.ExtensionPoint

hudson.ExtensionPoint.LegacyInstancesAreScopedToHudson

Constructor Summary

Constructors

Constructor and Description
AclAwareWhitelist(Whitelist unrestricted, Whitelist restricted) Creates a delegating whitelist.

Method Summary

Methods

Modifier and Type	Method and Description
boolean	permitsFieldGet(Object receiver, String field)
boolean	permitsFieldSet(Object receiver, String field, Object value)
boolean	permitsMethod(Object receiver, String method, Object[] args)
boolean	permitsNew(Class<?> receiver, Object[] args)
boolean	permitsStaticMethod(Class<?> receiver, String method, Object[] args)

Methods inherited from class org.jenkinsci.plugins.scriptsecurity.sandbox.Whitelist

all

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AclAwareWhitelist

public AclAwareWhitelist(Whitelist unrestricted,
                 Whitelist restricted)

Creates a delegating whitelist.

Parameters:

unrestricted - a general whitelist; anything permitted by this one will be permitted in any context

restricted - a whitelist of method/constructor calls (field accesses never consulted) for which ACL checks are expected

Method Detail

permitsMethod

public boolean permitsMethod(Object receiver,
                    String method,
                    Object[] args)

Specified by:

permitsMethod in class Whitelist

permitsNew

public boolean permitsNew(Class<?> receiver,
                 Object[] args)

Specified by:

permitsNew in class Whitelist

permitsStaticMethod

public boolean permitsStaticMethod(Class<?> receiver,
                          String method,
                          Object[] args)

Specified by:

permitsStaticMethod in class Whitelist

permitsFieldGet

public boolean permitsFieldGet(Object receiver,
                      String field)

Specified by:

permitsFieldGet in class Whitelist

permitsFieldSet

public boolean permitsFieldSet(Object receiver,
                      String field,
                      Object value)

Specified by:

permitsFieldSet in class Whitelist