[icedtea-web] RFC: add configuration support for user prompts (and other access control options)

[Omair Majid]

On 11/05/2010 12:48 PM, Omair Majid wrote:
> Hi,
>
> The attached patch adds support in netx for part of the 'security access
> and control' set of configuration options. The patch allows disabling
> user prompts for security warnings and denying permissions, as well as
> not installing custom authenticator and not granting permissions to hide
> window warnings.
>
> ChangeLog
> 2010-11-05 Omair Majid <omajid at redhat.com>
>
> * netx/net/sourceforge/jnlp/SecurityDesc.java: Remove window banner
> permissions from sandboxPermissions and j2eePermissions.
> (getSandBoxPermissions): Dynamically add window banner permissions
> if allowed by configuration.
> * netx/net/sourceforge/jnlp/runtime/DeploymentConfiguration.java:
> Add KEY_SECURITY_PROMPT_USER,
> KEY_SECURITY_ALLOW_HIDE_WINDOW_WARNING,
> KEY_SECURITY_PROMPT_USER_FOR_JNLP, and
> KEY_SECURITY_INSTALL_AUTHENTICATOR.
> (loadDefaultProperties): Use the new constants.
> * netx/net/sourceforge/jnlp/security/SecurityWarning.java
> (showAccessWarningDialog): Check if the user should be prompted
> before prompting the user.
> (showNotAllSignedWarningDialog): Likewise.
> (showCertWarningDialog): Likewise.
> (showAppletWarning): Likewise.
> (shouldPromptUser): New method. Check if configuration allows
> showing user prompts.
> * netx/net/sourceforge/jnlp/services/ServiceUtil.java
> (checkAccess(AccessType,Object...)): Clarify javadocs.
> (checkAccess(ApplicationInstance,AccessType,Object...)): Clarify
> javadocs. Only prompt the user if showing JNLP prompts is ok.
> (shouldPromptUser): New method. Returns true if configuration allows
> for showing JNLP api prompts.
> * plugin/icedteanp/java/sun/applet/PluginMain.java
> (init): Only install custom authenticator if allowed by
> configuration.
>
> Any thoughts or comments?
>

Ping. Anyone?

Cheers,
Omair