/*

 * Copyright (c) 2002, 2013, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package javax.management;

import java.security.BasicPermission;

import java.io.IOException;

import java.io.InvalidObjectException;

import java.io.ObjectInputStream;

/**

 * This permission represents "trust" in a signer or codebase.

 * <p>

 * MBeanTrustPermission contains a target name but no actions list.

 * A single target name, "register", is defined for this permission.

 * The target "*" is also allowed, permitting "register" and any future

 * targets that may be defined.

 * Only the null value or the empty string are allowed for the action

 * to allow the policy object to create the permissions specified in

 * the policy file.

 * <p>

 * If a signer, or codesource is granted this permission, then it is

 * considered a trusted source for MBeans. Only MBeans from trusted

 * sources may be registered in the MBeanServer.

 *

 * @since 1.5

 */

public class MBeanTrustPermission extends BasicPermission {

    private static final long serialVersionUID = -2952178077029018140L;

    /** <p>Create a new MBeanTrustPermission with the given name.</p>

        <p>This constructor is equivalent to

        <code>MBeanTrustPermission(name,null)</code>.</p>

        @param name the name of the permission. It must be

        "register" or "*" for this permission.

     *

     * @throws NullPointerException if <code>name</code> is <code>null</code>.

     * @throws IllegalArgumentException if <code>name</code> is neither

     * "register" nor "*".

     */

    public MBeanTrustPermission(String name) {

        this(name, null);

    }

    /** <p>Create a new MBeanTrustPermission with the given name.</p>

        @param name the name of the permission. It must be

        "register" or "*" for this permission.

        @param actions the actions for the permission.  It must be

        null or <code>""</code>.

     *

     * @throws NullPointerException if <code>name</code> is <code>null</code>.

     * @throws IllegalArgumentException if <code>name</code> is neither

     * "register" nor "*"; or if <code>actions</code> is a non-null

     * non-empty string.

     */

    public MBeanTrustPermission(String name, String actions) {

        super(name, actions);

        validate(name,actions);

    }

    private static void validate(String name, String actions) {

        /* Check that actions is a null empty string */

        if (actions != null && actions.length() > 0) {

            throw new IllegalArgumentException("MBeanTrustPermission actions must be null: " +

                                               actions);

        }

        if (!name.equals("register") && !name.equals("*")) {

            throw new IllegalArgumentException("MBeanTrustPermission: Unknown target name " +

                                               "[" + name + "]");

        }

    }

    private void readObject(ObjectInputStream in)

         throws IOException, ClassNotFoundException {

        // Reading private fields of base class

        in.defaultReadObject();

        try {

            validate(super.getName(),super.getActions());

        } catch (IllegalArgumentException e) {

            throw new InvalidObjectException(e.getMessage());

        }

    }

}