Patent ID: 6708276
Filing Date: 2004-03-16
Classification: G06F,Y10S

Abstract:
A method for determining access to objects in a Java runtime environment, the method comprising:responsive to instantiation of a protection domain, reading a policy configuration file having a list of granted and/or denied permissions, retrieving the granted and/or denied permissions, and associating the granted and/or denied permissions with a private attribute of a protection domain class; defining a second attribute of the protection domain class to identify a permission as a statically or dynamically defined permission; defining a third attribute of the protection domain class to identify whether to save a dynamically defined permission to the policy configuration file; operative at an access control point during execution of a Java applet, determining the protection domain of a class being examined; accessing a private attribute of the associated protection domain class to obtain a permission that is identified by the second attribute of the protection domain class as a statically defined permission; prompting a user to obtain a permission that is identified by the second attribute of the protection domain class as a dynamically defined permission; analyzing the obtained permission to determine whether access to a requested object has been denied to the protection domain; and saving a dynamically defined permission into the policy configuration file in accordance with the third attribute of the protection domain class.