US 12,158,952 B2 · Distinguished nest-based access control

Abstract

Techniques for determining and displaying error messages including a cause of an error generated because two types are not members of the same nest are disclosed. The system detects, at runtime, an instruction in a first type that attempts to access a private member of a second type. The system evaluates one or more nestmate criteria to determine whether the first type and the second type are within a same nest. A nest host corresponding to the nest specifies each nest member of the nest, and each nest member specifies an association with the nest. Responsive to determining that a particular nestmate criterion is not met, the system determines that the first type and the second type are not within the same nest and records or displays data identifying the particular nestmate criterion that has not been met, and throws an access error.

Claims18

Dependent claims

One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause performance of operations comprising:

determining that a first class file, associated with a first type, comprises a first nest host attribute that references a first nest host;
determining that the first nest host allows membership of the first type;
determining that a security policy allows the first nest host to serve as a nest host of the first type;
responsive at least to determining that the first nest host allows membership of the first type;
determining that the first nest host is the nest host of the first type;
permitting an action, with respect to the first class file, that depends on the first nest host being the nest host of the first type.

3 more elements

Dependencies are inferred from the claim text.

Distinguished nest-based access control

Life of this patent

Distinguished nest-based access control

Life of this patent

Abstract

Claims18