Interface SecurityFacade


  • public interface SecurityFacade
    SecurityFacade bundles security related and sensitive functionalities
    • Method Detail

      • checkType

        void checkType​(Class<?> clazz)
        Checks whether a certain type is allow listed for use at runtime
      • resolveClass

        Class<?> resolveClass​(String className,
                              ScriptingManager scriptingManager)
        Resolves a class from class loader, considering type allow lists and access control
      • createInstance

        <T> T createInstance​(Class<T> clazz)
        Creates an instance of a class
      • createInstance

        <T> T createInstance​(Class<T> baseClass,
                             Class<?> clazz)
        Creates an instance of a class, ensuring it's base class
      • isSecurityEnabled

        boolean isSecurityEnabled()
        Checks if enhanced security is enabled. It will never be disabled in releases.
      • requireCorePermission

        void requireCorePermission()
        Checks if the current access control context is elevated and throws an exception otherwise. Scripts will never have the required permission nor can acquire it.