[security-dev 00020]: Re: Retrieve the effective ProtectionDomains of a AccessControlContext?

[Sean Mullan]

Weijun Max Wang wrote:
> Hi Guys
> 
> What's the best way to find out what ProtectionDomains are effective 
> currently (or for a given AccessControlContext)?
> 
> For "effective", I mean those since the last doPrivileged call.
> 

I think you could do that with a DomainCombiner, ex:

- create an AccessControlContext with the DomainCombiner
- call AccessController.doPrivileged with the AccessControlContext

- when a security check occurs or when you invoke 
AccessController.getContext, your DomainCombiner can take a snapshot of 
the ProtectionDomains.

--Sean