src/org/objectweb/cjdbc/controller/core/security/ControllerSecurityManager.java

説明を見る。

package org.objectweb.cjdbc.controller.core.security;

import java.net.Socket;
import java.util.ArrayList;

import org.apache.regexp.RE;
import org.objectweb.cjdbc.common.net.SSLConfiguration;
import org.objectweb.cjdbc.common.xml.ControllerXmlTags;
import org.objectweb.cjdbc.common.xml.XmlComponent;

public class ControllerSecurityManager implements XmlComponent
{
  private boolean          allowAdditionalDriver = true;
  private boolean          allowConsoleShutdown  = true;
  private boolean          allowLocalConsoleOnly = true;
  private boolean          allowClientShutdown   = true;
  private boolean          allowLocalClientOnly  = true;
  private boolean          defaultConnect        = true;
  private ArrayList        accept;
  private ArrayList        saccept;
  private ArrayList        block;
  private ArrayList        sblock;
  private SSLConfiguration sslConfig;

  public ControllerSecurityManager()
  {
    block = new ArrayList();
    accept = new ArrayList();
    saccept = new ArrayList();
    sblock = new ArrayList();
  }

  public boolean allowConnection(Socket clientSocket)
  {
    if (checkList(accept, clientSocket))
      return true;
    if (checkList(block, clientSocket))
      return false;
    return defaultConnect;
  }

  public void addToSecureList(RE range, boolean baccept)
  {
    if (baccept)
      accept.add(range);
    else
      block.add(range);
  }

  public void addToSecureList(String range, boolean baccept) throws Exception
  {
    RE re = new RE(range);
    addToSecureList(re, baccept);
    if (baccept)
      saccept.add(range);
    else
      sblock.add(range);
  }

  public void addHostToSecureList(String host, boolean baccept)
  {
    if (baccept)
      accept.add(host);
    else
      block.add(host);
  }

  private static boolean checkList(ArrayList list, Socket clientSocket)
  {
    String hostAddress = clientSocket.getInetAddress().getHostAddress();
    String hostName = clientSocket.getInetAddress().getHostName();
    String ipaddress = clientSocket.getInetAddress().toString();
    Object o;
    RE re;
    String s;
    for (int i = 0; i < list.size(); i++)
    {
      o = list.get(i);
      if (o instanceof RE)
      {
        re = (RE) o;
        if (re.match(ipaddress))
          return true;
      }
      if (o instanceof String)
      {
        s = (String) o;
        if (s.equalsIgnoreCase(hostAddress) || s.equalsIgnoreCase(hostName))
          return true;
      }
    }
    return false;
  }

  public boolean getAllowAdditionalDriver()
  {
    return allowAdditionalDriver;
  }

  public void setAllowAdditionalDriver(boolean allowAdditionalDriver)
  {
    this.allowAdditionalDriver = allowAdditionalDriver;
  }

  public boolean getAllowClientShutdown()
  {
    return allowClientShutdown;
  }

  public void setAllowClientShutdown(boolean allowClientShutdown)
  {
    this.allowClientShutdown = allowClientShutdown;
  }

  public boolean getAllowConsoleShutdown()
  {
    return allowConsoleShutdown;
  }

  public void setAllowConsoleShutdown(boolean allowConsoleShutdown)
  {
    this.allowConsoleShutdown = allowConsoleShutdown;
  }

  public boolean getAllowLocalClientOnly()
  {
    return allowLocalClientOnly;
  }

  public void setAllowLocalClientOnly(boolean allowLocalClientOnly)
  {
    this.allowLocalClientOnly = allowLocalClientOnly;
  }

  public boolean getAllowLocalConsoleOnly()
  {
    return allowLocalConsoleOnly;
  }

  public void setAllowLocalConsoleOnly(boolean allowLocalConsoleOnly)
  {
    this.allowLocalConsoleOnly = allowLocalConsoleOnly;
  }

  public boolean getDefaultConnect()
  {
    return defaultConnect;
  }

  public void setDefaultConnect(boolean defaultConnect)
  {
    this.defaultConnect = defaultConnect;
  }

  public ArrayList getSaccept()
  {
    return saccept;
  }

  public ArrayList getSblock()
  {
    return sblock;
  }

  public ArrayList getAccept()
  {
    return accept;
  }

  public ArrayList getBlock()
  {
    return block;
  }

  public void setBlock(ArrayList block)
  {
    this.block = block;
  }

  public String getXml()
  {
    StringBuffer sb = new StringBuffer();
    sb.append("<" + ControllerXmlTags.ELT_SECURITY + " "
        + ControllerXmlTags.ATT_DEFAULT_CONNECT + "=\""
        + this.getDefaultConnect() + "\">");

    sb.append("<" + ControllerXmlTags.ELT_JAR + " "
        + ControllerXmlTags.ATT_ALLOW + "=\"" + this.getAllowAdditionalDriver()
        + "\"/>");

    sb.append("<" + ControllerXmlTags.ELT_SHUTDOWN + ">");
    sb.append("<" + ControllerXmlTags.ELT_CLIENT + " "
        + ControllerXmlTags.ATT_ALLOW + "=\"" + this.getAllowClientShutdown()
        + "\" " + ControllerXmlTags.ATT_ONLY_LOCALHOST + "=\""
        + this.getAllowLocalClientOnly() + "\" " + "/>");
    sb.append("<" + ControllerXmlTags.ELT_CONSOLE + " "
        + ControllerXmlTags.ATT_ALLOW + "=\"" + this.getAllowConsoleShutdown()
        + "\" " + ControllerXmlTags.ATT_ONLY_LOCALHOST + "=\""
        + this.getAllowLocalConsoleOnly() + "\" " + "/>");
    sb.append("</" + ControllerXmlTags.ELT_SHUTDOWN + ">");

    sb.append("<" + ControllerXmlTags.ELT_ACCEPT + ">");
    ArrayList list = this.getSaccept();
    String tmp;
    for (int i = 0; i < list.size(); i++)
    {
      sb.append("<" + ControllerXmlTags.ELT_IPRANGE + " "
          + ControllerXmlTags.ATT_VALUE + "=\"" + list.get(i) + "\"/>");
    }
    list = this.getAccept();
    for (int i = 0; i < list.size(); i++)
    {
      if (list.get(i) instanceof RE)
        continue;
      tmp = (String) list.get(i);
      if (tmp.indexOf(".") == -1)
        sb.append("<" + ControllerXmlTags.ELT_HOSTNAME + " "
            + ControllerXmlTags.ATT_VALUE + "=\"" + tmp + "\"/>");
      else
        sb.append("<" + ControllerXmlTags.ELT_IPADDRESS + " "
            + ControllerXmlTags.ATT_VALUE + "=\"" + tmp + "\"/>");
    }
    sb.append("</" + ControllerXmlTags.ELT_ACCEPT + ">");

    sb.append("<" + ControllerXmlTags.ELT_BLOCK + ">");
    list = this.getSblock();
    for (int i = 0; i < list.size(); i++)
    {
      sb.append("<" + ControllerXmlTags.ELT_IPRANGE + " "
          + ControllerXmlTags.ATT_VALUE + "=\"" + list.get(i) + "\"/>");
    }
    list = this.getBlock();
    for (int i = 0; i < list.size(); i++)
    {
      if (list.get(i) instanceof RE)
        continue;
      tmp = (String) list.get(i);
      if (tmp.indexOf(".") == -1)
        sb.append("<" + ControllerXmlTags.ELT_HOSTNAME + " "
            + ControllerXmlTags.ATT_VALUE + "=\"" + tmp + "\"/>");
      else
        sb.append("<" + ControllerXmlTags.ELT_IPADDRESS + " "
            + ControllerXmlTags.ATT_VALUE + "=\"" + tmp + "\"/>");
    }
    sb.append("</" + ControllerXmlTags.ELT_BLOCK + ">");

    sb.append("</" + ControllerXmlTags.ELT_SECURITY + ">");
    return sb.toString();
  }

  public boolean isSSLEnabled()
  {
    return sslConfig != null;
  }

  public SSLConfiguration getSslConfig()
  {
    return sslConfig;
  }

  public void setSslConfig(SSLConfiguration sslConfig)
  {
    this.sslConfig = sslConfig;
  }
}

---