Dynamic granting of permissions in an object-oriented code base
AssigneeInternational Business Machines Corporation
InventorsBrian Martin, Jian Tang
Life of this patent
Estimating the term…
Abstract
An apparatus, program product and method are capable of dynamically assigning different code base identifiers to different classes defined in the same code base during class load operations to enable different code base-correlated policies to be assigned to such classes, thereby effectively granting different access permissions to classes that are defined within the same code base.
Claims25
A method of executing object-oriented program code defined in a code base identified by a first code base identifier, the method comprising:
- during a class load of a class defined in the code base for the object-oriented program code, assigning a second code base identifier to the class that differs from the first code base identifier for the code base within which the class is defined;
- and
- determining an access permission for an instance of the class by accessing a policy associated with the second code base identifier.
A method of deploying a JAVA program, the method comprising:
- deploying a JAVA Archive (JAR) file, the JAR file including a class and a class loader that is configured to assign a code base identifier to the class that is different from that of the JAR file when loading the class;
- and
- deploying a policy file, the policy file including a policy associated with the code base identifier for the class such that the access permission granted to the class differs from that of at least one other class in the JAR file.
An apparatus, comprising:
- at least one processor;
- and
- program code configured to be executed by the at least one processor to load a class defined in a code base identified by a first code base identifier, and while loading the class, assign a second code base identifier to the class that differs from the first code base identifier for the code base within which the class is defined, wherein the second code base identifier is associated with a policy that defines an access permission for the class.
A program product, comprising:
- program code configured to load a class defined in a code base identified by a first code base identifier, and while loading the class, assign a second code base identifier to the class that differs from the first code base identifier for the code base within which the class is defined, wherein the second code base identifier is associated with a policy that defines an access permission for the class;
- and
- a computer readable medium bearing the program code.
Dependencies are inferred from the claim text.