[icedtea-web] RFC: add configuration support for user prompts (and other access control options)

[Omair Majid]

Hi,

The attached patch adds support in netx for part of the 'security access 
and control' set of configuration options. The patch allows disabling 
user prompts for security warnings and denying permissions, as well as 
not installing custom authenticator and not granting permissions to hide 
window warnings.

ChangeLog
2010-11-05  Omair Majid  <omajid at redhat.com>

     * netx/net/sourceforge/jnlp/SecurityDesc.java: Remove window banner
     permissions from sandboxPermissions and j2eePermissions.
     (getSandBoxPermissions): Dynamically add window banner permissions
     if allowed by configuration.
     * netx/net/sourceforge/jnlp/runtime/DeploymentConfiguration.java:
     Add KEY_SECURITY_PROMPT_USER,
     KEY_SECURITY_ALLOW_HIDE_WINDOW_WARNING,
     KEY_SECURITY_PROMPT_USER_FOR_JNLP, and
     KEY_SECURITY_INSTALL_AUTHENTICATOR.
     (loadDefaultProperties): Use the new constants.
     * netx/net/sourceforge/jnlp/security/SecurityWarning.java
     (showAccessWarningDialog): Check if the user should be prompted
     before prompting the user.
     (showNotAllSignedWarningDialog): Likewise.
     (showCertWarningDialog): Likewise.
     (showAppletWarning): Likewise.
     (shouldPromptUser): New method. Check if configuration allows
     showing user prompts.
     * netx/net/sourceforge/jnlp/services/ServiceUtil.java
     (checkAccess(AccessType,Object...)): Clarify javadocs.
     (checkAccess(ApplicationInstance,AccessType,Object...)): Clarify
     javadocs. Only prompt the user if showing JNLP prompts is ok.
     (shouldPromptUser): New method. Returns true if configuration allows
     for showing JNLP api prompts.
     * plugin/icedteanp/java/sun/applet/PluginMain.java
     (init): Only install custom authenticator if allowed by
     configuration.

Any thoughts or comments?

Thanks,
Omair
-------------- next part --------------
A non-text attachment was scrubbed...
Name: icedtea-web-integrate-configuration-prompts-01.patch
Type: text/x-patch
Size: 10496 bytes
Desc: not available
Url : http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20101105/664c34df/icedtea-web-integrate-configuration-prompts-01.patch