Can I restrict permissions at runtime?

Posted: 5/25/2005 12:49:00 PM

java-programmer, Can I restrict permissions at runtime? I have an editor application that I've writen that needs to read and
write XML files to disk. I'd like to extend this program by allowing
users to extend my editor by plugging in custom code they compile using
certain interfaces. My editor will call their code to gain use of
their functions.

However, this plugin code is untrusted, and I don't want it to access
the filesystem or network. Is there some way I can create a sandbox
within my program in which I can run this custom code and be sure that
it cannot do things like write to the filesystem? Perhaps create a
separate thread with special restricted permissions?

Mark McKay

Posted: 5/25/2005 12:58:00 PM

java-programmer >> Can I restrict permissions at runtime? On 24 May 2005 21:49:02 -0700, email***@***.com wrote:

> ..Is there some way I can create a sandbox
> within my program in which I can run this custom code and be sure that
> it cannot do things like write to the filesystem?

Apply a custom security manager.
<http://groups-beta.google.com/group/comp.lang.java.programmer/messages/fc77adad29a3fc08,d82a65929e3508d0,937569dfda76174b,948df8d8bf985386,0449635b4f6ec8af,2f2d4beeb6564d32,58b9bcd4064efb85,efb23296a81d4223,f29ab45389d9f5f2?thread_id=6008bc2e14d4e02e&mode=thread&noheader=1#doc_f29ab45389d9f5f2>

HTH

--
Andrew Thompson
http://www.PhySci.org/codes/ Web & IT Help
http://www.PhySci.org/ Open-source software suite
http://www.1point1C.org/ Science & Technology
http://www.LensEscapes.com/ Images that escape the mundane