## Java Authorization Contract for Containers
JACC - 1.5
JavaDoc Assertion Detail

Totals | Total | Active | Deprecated | Removed
# of Assertions | 62 | 62 | 0 | 0
# of Required Assertions | 62 | 62 | 0 | 0
# of Optional Assertions | 0 | 0 | 0 | 0

ID | Return | Method/Field | Description | Required | Deprecated | Testable
JACC:JAVADOC:1 | EJBMethodPermission | javax.security.jacc.EJBMethodPermission.EJBMethodPermission ( String , String ) | Creates a new EJBMethodPermission with the specified name and actions. The name contains the value of the ejb-name element corresponding to an EJB in the application's deployment descriptor. The actions contains a methodSpec. The syntax of the actions parameter is defined as follows: methodNameSpec ::= methodName | emptyString methodInterface ::= Home | LocalHome | Remote | Local | ServiceEndpoint methodInterfaceSpec ::= methodInterface | emptyString methodParams ::= typeName | methodParams comma typeName methodParamsSpec ::= emptyString | methodParams methodSpec ::= null | methodNameSpec | methodNameSpec comma methodInterface | methodNameSpec comma methodInterfaceSpec comma methodParamsSpec A null or empty string methodSpec indicates that the permission applies to all methods of the EJB. A methodSpec with a methodNameSpec of the empty string matches all methods of the EJB that match the methodInterface and methodParams elements of the methodSpec. A methodSpec with a methodInterfaceSpec of the empty string matches all methods of the EJB that match the methodNameSpec and methodParams elements of the methodSpec. A methodSpec without a methodParamsSpec matches all methods of the EJB that match the methodNameSpec and methodInterface elements of the methodSpec. Each typeName appearing in methodParams must be the fully-qualified Java type name of a parameter of the target method. The order of the typeNames in methodParams must match the order of occurence of the corresponding parameters in the method signature of the target method(s). A methodSpec with an empty methodParamsSpec matches all 0 argument methods of the EJB that match the methodNameSpec and methodInterfaceSpec elements of the methodSpec. | true |  | true
JACC:JAVADOC:2 | EJBMethodPermission | javax.security.jacc.EJBMethodPermission.EJBMethodPermission ( String , String , String , String[] ) | Creates a new EJBMethodPermission with name corresponding to the EJBName and actions composed from methodName, methodInterface, and methodParams. | true |  | true
JACC:JAVADOC:3 | EJBMethodPermission | javax.security.jacc.EJBMethodPermission.EJBMethodPermission ( String , String , Method ) | Creates a new EJBMethodPermission with name corresponding to the EJBName and actions composed from methodInterface, and the Method object. A container uses this constructor prior to checking if a caller has permission to call the method of an EJB. | true |  | true
JACC:JAVADOC:4 | boolean | javax.security.jacc.EJBMethodPermission.equals ( Object ) | Checks two EJBMethodPermission objects for equality. EJBMethodPermission objects are equivalent if they have case sensitive equivalent name and actions values. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) AND P2.implies(P1). | true |  | true
JACC:JAVADOC:5 | String | javax.security.jacc.EJBMethodPermission.getActions | Returns a String containing a canonical representation of the actions of this EJBMethodPermission. The Canonical form of an EJBMethodPermission is described by the following syntax description. methodNameSpec ::= methodName | emptyString methodInterface ::= Home | LocalHome | Remote | Local | ServiceEndpoint methodInterfaceSpec ::= methodInterface | emptyString methodParams ::= typeName | methodParams comma typeName methodParamsSpec ::= emptyString | methodParams methodSpec ::= null | methodNameSpec | methodNameSpec comma methodInterface | methodNameSpec comma methodInterfaceSpec comma methodParamsSpec | true |  | true
JACC:JAVADOC:6 | int | javax.security.jacc.EJBMethodPermission.hashCode | Returns the hash code value for this EJBMethodPermission. The properties of the returned hash code must be as follows: During the lifetime of a Java application, the hashCode method must return the same integer value every time it is called on a EJBMethodPermission object. The value returned by hashCode for a particular EJBMethodPermission need not remain consistent from one execution of an application to another. If two EJBMethodPermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). | true |  | true
JACC:JAVADOC:7 | boolean | javax.security.jacc.EJBMethodPermission.implies ( Permission ) | Determines if the argument Permission is implied by this EJBMethodPermission. For this to be the case, The argument must be an instanceof EJBMethodPermission with name equivalent to that of this EJBMethodPermission, and the methods to which the argument permission applies (as defined in its actions) must be a subset of the methods to which this EJBMethodPermission applies (as defined in its actions) The name and actions comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:8 | EJBRoleRefPermission | javax.security.jacc.EJBRoleRefPermission.EJBRoleRefPermission ( String , String ) | Creates a new EJBRoleRefPermission with the specified name and actions. | true |  | true
JACC:JAVADOC:9 | boolean | javax.security.jacc.EJBRoleRefPermission.equals ( Object ) | Checks two EJBRoleRefPermission objects for equality. EJBRoleRefPermission objects are equivalent if they have case equivalent name and actions values. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) AND P2.implies(P1). | true |  | true
JACC:JAVADOC:10 | String | javax.security.jacc.EJBRoleRefPermission.getActions | Returns a canonical String representation of the actions of this EJBRoleRefPermission. | true |  | true
JACC:JAVADOC:11 | int | javax.security.jacc.EJBRoleRefPermission.hashCode | Returns the hash code value for this EJBRoleRefPermission. The properties of the returned hash code must be as follows: During the lifetime of a Java application, the hashCode method must return the same integer value, every time it is called on a EJBRoleRefPermission object. The value returned by hashCode for a particular EJBRoleRefPermission need not remain consistent from one execution of an application to another. If two EJBRoleRefPermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). | true |  | true
JACC:JAVADOC:12 | boolean | javax.security.jacc.EJBRoleRefPermission.implies ( Permission ) | Determines if the argument Permission is implied by this EJBRoleRefPermission. For this to be the case, The argument must be an instanceof EJBRoleRefPermission with name equivalent to that of this EJBRoleRefPermission, and with the role reference equivalent to that of this EJBRoleRefPermission applies. The name and actions comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:13 | void | javax.security.jacc.PolicyConfiguration.addToExcludedPolicy ( PermissionCollection ) | Used to add excluded policy statements to this PolicyConfiguration. | true |  | true
JACC:JAVADOC:14 | void | javax.security.jacc.PolicyConfiguration.addToExcludedPolicy ( Permission ) | Used to add a single excluded policy statement to this PolicyConfiguration. | true |  | true
JACC:JAVADOC:15 | void | javax.security.jacc.PolicyConfiguration.addToRole ( String , PermissionCollection ) | Used to add permissions to a named role in this PolicyConfiguration. If the named Role does not exist in the PolicyConfiguration, it is created as a result of the call to this function. It is the job of the Policy provider to ensure that all the permissions added to a role are granted to principals mapped to the role. | true |  | true
JACC:JAVADOC:16 | void | javax.security.jacc.PolicyConfiguration.addToRole ( String , Permission ) | Used to add a single permission to a named role in this PolicyConfiguration. If the named Role does not exist in the PolicyConfiguration, it is created as a result of the call to this function. It is the job of the Policy provider to ensure that all the permissions added to a role are granted to principals mapped to the role. | true |  | true
JACC:JAVADOC:17 | void | javax.security.jacc.PolicyConfiguration.addToUncheckedPolicy ( PermissionCollection ) | Used to add unchecked policy statements to this PolicyConfiguration. | true |  | true
JACC:JAVADOC:18 | void | javax.security.jacc.PolicyConfiguration.addToUncheckedPolicy ( Permission ) | Used to add a single unchecked policy statement to this PolicyConfiguration. | true |  | true
JACC:JAVADOC:19 | void | javax.security.jacc.PolicyConfiguration.commit ( ) | Causes all policy statements to be deleted from this PolicyConfiguration and sets its internal state such that any additional operations attempted on the PolicyConfiguration will be rejected and cause an UnsupportedOperationException to be thrown. This operation has no affect on any linked PolicyConfigurations other than removing any links involving the deleted PolicyConfiguration. | true |  | true
JACC:JAVADOC:20 | void | javax.security.jacc.PolicyConfiguration.delete | This method is used to set to inService the state of the policy context whose interface is this Policy- Configuration Object. Only those policy contexts whose state is inService will be included in the policy contexts processed by the Policy.refresh method. A policy context whose state is inService may be returned to the open state by calling the getPolicyConfiguration method of the PolicyConfiguration factory with the policy context identifier of the policy context. When the state of a policy context is inService, calling any method other than commit, delete, get- ContextID, or inService on its PolicyConfiguration Object will cause an UnsupportedOperationException to be thrown. | true |  | true
JACC:JAVADOC:21 | String | javax.security.jacc.PolicyConfiguration.getContextID | This method returns this object's policy context identifier. | true |  | true
JACC:JAVADOC:22 | boolean | javax.security.jacc.PolicyConfiguration.inService | Creates a relationship between this configuration and another such that they share the same principal-to-role mappings. PolicyConfigurations are linked to apply a common principal-to-role mapping to multiple seperately manageable PolicyConfigurations, as is required when an application is composed of multiple modules. Note that the policy statements which comprise a role, or comprise the excluded or unchecked policy collections in a PolicyConfiguration are unaffected by the configuration being linked to another. | true |  | true
JACC:JAVADOC:23 | void | javax.security.jacc.PolicyConfiguration.linkConfiguration ( PolicyConfiguration ) | This method is used to determine if the policy context whose interface is this PolicyConfiguration Object is in the inService state. | true |  | true
JACC:JAVADOC:24 | void | javax.security.jacc.PolicyConfiguration.removeExcludedPolicy | Used to remove any excluded policy statements from this PolicyConfiguration. | true |  | true
JACC:JAVADOC:25 | void | javax.security.jacc.PolicyConfiguration.removeRole ( String ) | Used to remove a role and all its permissions from this PolicyConfiguration. | true |  | true
JACC:JAVADOC:26 | void | javax.security.jacc.PolicyConfiguration.removeUncheckedPolicy | Used to remove any unchecked policy statements from this PolicyConfiguration. | true |  | true
JACC:JAVADOC:27 | boolean | javax.security.jacc.PolicyConfigurationFactory.contains ( String ) | This method determines if a PolicyConfiguration with policy context identifier equivalent to the argument contextID, already exists in the Policy provider associated with the factory. | true |  | true
JACC:JAVADOC:28 | PolicyConfiguration | javax.security.jacc.PolicyConfigurationFactory.getPolicyConfiguration ( String , boolean ) | This method is used to obtain an instance of the provider specific class that implements the PolicyConfiguration interface and that corresponds to one policy configuration within a provider. The methods of the PolicyConfiguration interface are used to define the policy statements of the associated policy configuration. For a given value of policy context identifier, this method must always return the same instance of PolicyConfiguration and there must be at most one actual instance of a PolicyConfiguration with a given policy context identifier (during a process context). | true |  | true
JACC:JAVADOC:29 | PolicyConfigurationFactory | javax.security.jacc.PolicyConfigurationFactory.getPolicyConfigurationFactory | This static method uses a system property to find and instantiate (via a public constructor) a provider specific factory implementation class. The name of the provider specific factory implementation class is obtained from the value of the system property, javax.security.jacc.PolicyConfigurationFactory.provider | true |  | true
JACC:JAVADOC:30 | PolicyConfigurationFactory | javax.security.jacc.PolicyConfigurationFactory.getPolicyConfigurationFactory throws ClassNotFoundException | when the class named by the system property could not be found including because the value of the system property has not been set. | true |  | true
JACC:JAVADOC:31 | PolicyConfigurationFactory | javax.security.jacc.PolicyConfigurationFactory.PolicyConfigurationFactory |  | true |  | true
JACC:JAVADOC:32 | boolean | javax.security.jacc.PolicyConfigurationFactory.inService | Authorization protected method that may be used by a Policy provider to activate the PolicyContextHandler registered to the context object key and cause it to return the corresponding policy context object from the container. When a handler is activated by this method, it passes to the handler the context object key and the handler data associated with the calling thread. | true |  | true
JACC:JAVADOC:33 | Object | javax.security.jacc.PolicyContext.getContext ( String ) |  | true |  | true
JACC:JAVADOC:34 | String | javax.security.jacc.PolicyContext.getContextID | This static method returns the value of the policy context identifier associated with the thread on which the accessor is called. | true |  | true
JACC:JAVADOC:35 | Set | javax.security.jacc.PolicyContext.getHandlerKeys | This method may be used to obtain the keys that identify the container specific context handlers registered by the container. | true |  | true
JACC:JAVADOC:36 | void | javax.security.jacc.PolicyContext.registerHandler ( String , PolicyContextHandler , boolean ) | Authorization protected method used to register a container specific PolicyContext handler. A handler may be registered to handle multiple keys, but at any time, at most one handler may be registered for a key. | true |  | true
JACC:JAVADOC:37 | void | javax.security.jacc.PolicyContext.setContextID ( String ) | Authorization protected method used to modify the value of the policy context identifier associated with the thread on which this method is called. | true |  | true
JACC:JAVADOC:38 | void | javax.security.jacc.PolicyContext.setHandlerData ( Object ) | Authorization protected method that may be used to associate a thread-scoped handler data object with the PolicyContext. The handler data object will be made available to handlers, where it can serve to supply or bind the handler to invocation scoped state within the container. | true |  | true
JACC:JAVADOC:39 | Object | javax.security.jacc.PolicyContextHandler.getContext ( String , Object ) | This public method is used by the PolicyContext class to activate the handler and obtain from it the the context object identified by the (case-sensitive) key. In addition to the key, the handler will be activated with the handler data value associated within the PolicyContext class with the thread on which the call to this method is made. Note that the policy context identifier associated with a thread is available to the handler by calling PolicyContext.getContextID(). | true |  | true
JACC:JAVADOC:40 | String[] | javax.security.jacc.PolicyContextHandler.getKeys | This public method returns the keys identifying the context objects supported by the handler. The value of each key supported by a handler must be a non-null String value. | true |  | true
JACC:JAVADOC:41 | boolean | javax.security.jacc.PolicyContextHandler.supports ( String ) | This public method returns a boolean result indicating whether or not the handler supports the context object identified by the (case-sensitive) key value. | true |  | true
JACC:JAVADOC:42 | int | javax.security.jacc.WebResourcePermission.compareTo ( Object ) | Determines whether this WebResourcePermission is less than, equal to, or greater than the specified object, and returns a negative integer, zero, or a positive integer respectively. The behavior of this method must conform to the specification of the CompareTo method of interface Comparable. This method is used to sort WebResourcePermissions according to Servlet's path matching rules, and as necessary to implement best match for Servlet constraint selection and enforcement. WebResourcePermissions are sorted first by URL Pattern type. The sorting by URL Pattern type is done such that exact patterns (those not ending with * or /, or beginning with *.) sort less than path prefix patterns (those ending with /*), path prefix patterns sort less than extension patterns (those beginning with *.), and such that extension patterns sort less than the universal pattern /). Path prefix patterns are sorted first by pattern depth; with deeper patterns sorting less than shallower patterns. Same depth path prefix patterns are sorted by case sensitive lexical comparison of the same depth nodes, beginning with the root node, and continuing until a difference is found. Within pattern types other than path prefix patterns, same type patterns are sorted to case sensitive lexical order. Additional sorting by actions of pattern equivalent permissions is optional. | true |  | true
JACC:JAVADOC:43 | boolean | javax.security.jacc.WebResourcePermission.equals ( Object ) | Checks two WebResourcePermission objects for equality. WebResourcePermission objects are equivalent if they have case equivalent name and actions values. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) AND P2.implies(P1). | true |  | true
JACC:JAVADOC:44 | String | javax.security.jacc.WebResourcePermission.getActions | Returns a canonical String representation of the actions of this WebResourcePermission. WebResourcePermission actions are canonicalized by sorting the HTTP methods into lexical order. | true |  | true
JACC:JAVADOC:45 | int | javax.security.jacc.WebResourcePermission.hashCode | Returns the hash code value for this WebResourcePermission. The properties of the returned hash code must be as follows: During the lifetime of a Java application, the hashCode method must return the same integer value, every time it is called on a WebResourcePermission object. The value returned by hashCode for a particular WebResourcePermission need not remain consistent from one execution of an application to another. If two WebResourcePermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). | true |  | true
JACC:JAVADOC:46 | boolean | javax.security.jacc.WebResourcePermission.implies ( Permission ) | Determines if the argument Permission is implied by this WebResourcePermission. For this to be the case, The argument must be an instanceof WebResourcePermission with name matched by this WebResourcePermission (according to the servlet matching rules), and the HTTP methods to which the argument permission applies (as defined in its actions) must be a subset of the HTTP methods to which this WebResourcePermission applies (as defined in its actions). The servlet matching rules are used to determine if the name of this WebResourcePermission matches the name of the argument permission. The names match if the values of the URL pattern portions of their names are related as follows: their URL patterns are lexically equivalent, or the URL pattern of this WebResourcePermission is a path-prefix pattern (that is, it ends with /*), and the path-prefix pattern (minus the last 2 characters) is an exact match for a prefix of the URL pattern of the argument permission, or the URL pattern of this WebResourcePermission is an extension pattern (that is, it begins with *.) and the substring of the extension pattern beginning with the . and extending to the end of the pattern, is an exact match for the end of the URL pattern of the argument permission. the URL pattern of this WebResourcePermission is the special pattern containing only the default character / (may be more than one /) which matches all other URL patterns. All of the comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:47 | WebResourcePermission | javax.security.jacc.WebResourcePermission.WebResourcePermission ( String , String ) | Creates a new WebResourcePermission with the specified name and actions. The name contains a URL Pattern (as defined in the Java Servlet Specification). The URLPattern identifies the web resources to which the permission applies. The actions parameter contains a comma seperated list of HTTP methods. The syntax of the actions parameter is defined as follows: HTTPMethod ::= GET | POST | PUT | DELETE | HEAD | OPTIONS | TRACE HTTPMethodList ::= HTTPMethod | HTTPMethodList comma HTTPMethod HTTPMethodSpec ::= null | HTTPMethodList If duplicates occur in the HTTPMethodSpec they must be eliminated by the permission constructor. A null or empty string HTTPMethodSpec indicates that the permission applies to all HTTP methods at the resources identified by the URL pattern. | true |  | true
JACC:JAVADOC:48 | WebResourcePermission | javax.security.jacc.WebResourcePermission.WebResourcePermission ( String , String[] ) | Creates a new WebResourcePermission with name corresponding to the URLPattern, and actions composed from the array of HTTP methods. | true |  | true
JACC:JAVADOC:49 | WebResourcePermission | javax.security.jacc.WebResourcePermission.WebResourcePermission ( HttpServletRequest ) | Creates a new WebResourcePermission from the HttpServletRequest object. A container uses this constructor prior to checking if a caller has permission to perform a servlet request. | true |  | true
JACC:JAVADOC:50 | boolean | javax.security.jacc.WebRoleRefPermission.equals ( Object ) | Checks two WebRoleRefPermission objects for equality. WebRoleRefPermission objects are equivalent if they have case equivalent name and actions values. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) AND P2.implies(P1). The name and actions comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:51 | String | javax.security.jacc.WebRoleRefPermission.getActions | Returns a canonical String representation of the actions of this WebRoleRefPermission. | true |  | true
JACC:JAVADOC:52 | int | javax.security.jacc.WebRoleRefPermission.hashCode | Returns the hash code value for this WebRoleRefPermission. The properties of the returned hash code must be as follows: During the lifetime of an Java application, the hashCode method must return the same integer value, every time it is called on a WebRoleRefPermission object. The value returned by hashCode for a particular WebRoleRefPermission need not remain consistent from one execution of an application to another. If two WebRoleRefPermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). | true |  | true
JACC:JAVADOC:53 | boolean | javax.security.jacc.WebRoleRefPermission.implies ( Permission ) | Determines if the argument Permission is implied by this WebRoleRefPermission. For this to be the case, The argument must be an instanceof WebRoleRefPermission with name equivalent to this WebRoleRefPermission, and with role reference equivalent to this WebRoleRefPermission (as defined in their actions). The comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:54 | WebRoleRefPermission | javax.security.jacc.WebRoleRefPermission.WebRoleRefPermission ( String , String ) | Creates a new WebRoleRefPermission with the specified name and actions. | true |  | true
JACC:JAVADOC:55 | int | javax.security.jacc.WebUserDataPermission.compareTo ( Object ) | Determines whether this WebUserDataPermission is less than, equal to, or greater than the specified object, and returns a negative integer, zero, or a positive integer respectively. The behavior of this method must conform to the specification of the CompareTo method of interface Comparable. This method is used to sort WebUserDataPermissions according to Servlet's path matching rules, and as necessary to implement best match for Servlet constraint selection and enforcement. WebUserDataPermissions are sorted first by URL Pattern type. The sorting by URL Pattern type is done such that exact patterns (those not ending with * or /, or beginning with *.) sort less than path prefix patterns (those ending with /*), path prefix patterns sort less than extension patterns (those beginning with *.), and such that extension patterns sort less than the universal pattern /). Path prefix patterns are sorted first by pattern depth; with deeper patterns sorting less than shallower patterns. Same depth path prefix patterns are sorted by case sensitive lexical comparison of the same depth nodes, beginning with the root node, and continuing until a difference is found. Within pattern types other than path prefix patterns, same type patterns are sorted to case sensitive lexical order. Additional sorting by actions of pattern equivalent permissions is optional. | true |  | true
JACC:JAVADOC:56 | boolean | javax.security.jacc.WebUserDataPermission.equals ( Object ) | Checks two WebUserDataPermission objects for equality. WebUserDataPermission objects are equivalent if they have case equivalent name and actions values. Two Permission objects, P1 and P2, are equivalent if and only if P1.implies(P2) AND P2.implies(P1). | true |  | true
JACC:JAVADOC:57 | String | javax.security.jacc.WebUserDataPermission.getActions | Returns a canonical String representation of the actions of this WebUserDataPermission. WebUserDataPermission actions are canonicalized by sorting the HTTP methods and transport Types into lexical order. | true |  | true
JACC:JAVADOC:58 | int | javax.security.jacc.WebUserDataPermission.hashCode | Returns the hash code value for this WebUserDataPermission. The properties of the returned hash code must be as follows: During the lifetime of an Java application, the hashCode method shall return the same integer value every time it is called on a WebUserDataPermission object. The value returned by hashCode for a particular EJBMethod permission need not remain consistent from one execution of an application to another. If two WebUserDataPermission objects are equal according to the equals method, then calling the hashCode method on each of the two Permission objects must produce the same integer result (within an application). | true |  | true
JACC:JAVADOC:59 | boolean | javax.security.jacc.WebUserDataPermission.implies ( Permission ) | Determines if the argument Permission is implied by this WebUserDataPermission. For this to be the case, The argument must be an instanceof WebUserDataPermission with name matched by this WebUserDataPermission (according to the servlet matching rules), and the HTTP methods to which the argument permission applies (as defined in its actions) must be a subset of the HTTP methods to which this WebUserDataPermission applies (as defined in its actions), and the transport types to which the argument permission applies (as defined in its actions) must be a subset of the Transport types to which this WebUserDataPermission applies (as defined in its actions). The servlet matching rules are used to determine if the name of this WebUserDataPermission matches the name of the argument permission. The names match if the values of the URL pattern portions of their names are related as follows: their URL patterns are lexically equivalent, or the URL pattern of this WebUserDataPermission is a path-prefix pattern (that is, it ends with /*), and the path-prefix pattern (minus the last 2 characters) is an exact match for a prefix of the URL pattern of the argument permission, or the URL pattern of this WebUserDataPermission is an extension pattern (that is, it begins with *.) and the substring of the extension pattern beginning with the . and extending to the end of the pattern, is an exact match for the end of the URL pattern of the argument permission. the URL pattern of this WebUserDataPermission is the special pattern containing only the default character / (there may be more than one /) which matches all other URL patterns. All of the comparisons described above are case sensitive. | true |  | true
JACC:JAVADOC:60 | WebUserDataPermission | javax.security.jacc.WebUserDataPermission.WebUserDataPermission ( String , String ) | Creates a new WebUserDataPermission with the specified name and actions. The name contains a URL Pattern (as defined in the Java Servlet Specification). The URL Pattern identifies the web resources to which the permission applies. The actions parameter contains a comma separated list of HTTP methods followed by a comma separated list of transport protection types. The syntax of the actions parameter is defined as follows: HTTPMethod ::= Get | POST | PUT | DELETE | HEAD | OPTIONS | TRACE HTTPMethodList ::= HTTPMethod | HTTPMethodList comma HTTPMethod HTTPMethodSpec ::= emptyString | HTTPMethodList transportType ::= CLEAR | INTEGRAL | CONFIDENTIAL | UNCONSTRAINED transportTypeList ::= transportType | transportTypeList comma transportType transportTypeSpec ::= emptyString | transportTypeList actions ::= null | HTTPMethodSpec | HTTPMethodSpec colon transportTypeSpec If duplicates occur in either the HTTPMethodSpec or transportTypeSpec, they must be eliminated by the permission constructor. An empty string HTTPMethodSpec is a shorthand for a List containing all the possible HTTP methods. An empty string transportTypeSpec is a shorthand for a TransportTypeList containing the transportType value UNCONSTRAINED. A transportType of UNCONSTRAINED indicates that the associated HTTP methods at the web resources identified by the URL pattern may be accessed over any transport. The transportType UNCONSTRAINED is overridden by any other transportType associated with an equivalent URLPattern. | true |  | true
JACC:JAVADOC:61 | WebUserDataPermission | javax.security.jacc.WebUserDataPermission.WebUserDataPermission ( String , String[] , String[] ) | Creates a new WebUserDataPermission with name corresponding to the URLPattern, and actions composed from the array of HTTP methods and the array of transport types. | true |  | true
JACC:JAVADOC:62 | WebUserDataPermission | javax.security.jacc.WebUserDataPermission.WebUserDataPermission ( HttpServletRequest ) | Creates a new WebUserDataPermission from the HttpServletRequest object. A container uses this constructor prior to checking if a caller has permission to perform a servlet request. | true |  | true