X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2Finternal%2Fkernel%2FSecurityProfile.java;h=e2683af678ff2b030d4df4409cff7aa029f7eb98;hb=681290ba6cddc797e8a955d06d40c054b47e2ab2;hp=7d5242fa268dd026ac264a9f105149700ae776bb;hpb=1f4ff4da0e5d85821b005267dfa9eece9f8ca9bb;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/internal/kernel/SecurityProfile.java b/org.argeo.cms/src/org/argeo/cms/internal/kernel/SecurityProfile.java
index 7d5242fa2..e2683af67 100644
--- a/org.argeo.cms/src/org/argeo/cms/internal/kernel/SecurityProfile.java
+++ b/org.argeo.cms/src/org/argeo/cms/internal/kernel/SecurityProfile.java
@@ -19,8 +19,10 @@ import org.osgi.service.condpermadmin.ConditionInfo;
 import org.osgi.service.condpermadmin.ConditionalPermissionAdmin;
 import org.osgi.service.condpermadmin.ConditionalPermissionInfo;
 import org.osgi.service.condpermadmin.ConditionalPermissionUpdate;
+import org.osgi.service.permissionadmin.PermissionAdmin;
 import org.osgi.service.permissionadmin.PermissionInfo;
 
+/** Security profile based on OSGi {@link PermissionAdmin}. */
 public interface SecurityProfile {
 	BundleContext bc = FrameworkUtil.getBundle(SecurityProfile.class).getBundleContext();
 
@@ -139,42 +141,42 @@ public interface SecurityProfile {
 				ConditionalPermissionInfo.ALLOW));
 
 		// Blueprint
-		Bundle blueprintBundle = findBundle("org.eclipse.gemini.blueprint.core");
-		update.getConditionalPermissionInfos()
-				.add(permissionAdmin.newConditionalPermissionInfo(null,
-						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
-								new String[] { blueprintBundle.getLocation() }) },
-						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
-								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
-						ConditionalPermissionInfo.ALLOW));
-		Bundle blueprintExtenderBundle = findBundle("org.eclipse.gemini.blueprint.extender");
-		update.getConditionalPermissionInfos()
-				.add(permissionAdmin
-						.newConditionalPermissionInfo(null,
-								new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
-										new String[] { blueprintExtenderBundle.getLocation() }) },
-								new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
-										new PermissionInfo(PropertyPermission.class.getName(), "org.eclipse.gemini.*",
-												"read"),
-										new PermissionInfo(AdminPermission.class.getName(), "*", "*"),
-										new PermissionInfo(ServicePermission.class.getName(), "*", "register"), },
-								ConditionalPermissionInfo.ALLOW));
-		Bundle springCoreBundle = findBundle("org.springframework.core");
-		update.getConditionalPermissionInfos()
-				.add(permissionAdmin.newConditionalPermissionInfo(null,
-						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
-								new String[] { springCoreBundle.getLocation() }) },
-						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
-								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
-						ConditionalPermissionInfo.ALLOW));
-		Bundle blueprintIoBundle = findBundle("org.eclipse.gemini.blueprint.io");
-		update.getConditionalPermissionInfos()
-				.add(permissionAdmin.newConditionalPermissionInfo(null,
-						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
-								new String[] { blueprintIoBundle.getLocation() }) },
-						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
-								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
-						ConditionalPermissionInfo.ALLOW));
+//		Bundle blueprintBundle = findBundle("org.eclipse.gemini.blueprint.core");
+//		update.getConditionalPermissionInfos()
+//				.add(permissionAdmin.newConditionalPermissionInfo(null,
+//						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
+//								new String[] { blueprintBundle.getLocation() }) },
+//						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
+//								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
+//						ConditionalPermissionInfo.ALLOW));
+//		Bundle blueprintExtenderBundle = findBundle("org.eclipse.gemini.blueprint.extender");
+//		update.getConditionalPermissionInfos()
+//				.add(permissionAdmin
+//						.newConditionalPermissionInfo(null,
+//								new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
+//										new String[] { blueprintExtenderBundle.getLocation() }) },
+//								new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
+//										new PermissionInfo(PropertyPermission.class.getName(), "org.eclipse.gemini.*",
+//												"read"),
+//										new PermissionInfo(AdminPermission.class.getName(), "*", "*"),
+//										new PermissionInfo(ServicePermission.class.getName(), "*", "register"), },
+//								ConditionalPermissionInfo.ALLOW));
+//		Bundle springCoreBundle = findBundle("org.springframework.core");
+//		update.getConditionalPermissionInfos()
+//				.add(permissionAdmin.newConditionalPermissionInfo(null,
+//						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
+//								new String[] { springCoreBundle.getLocation() }) },
+//						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
+//								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
+//						ConditionalPermissionInfo.ALLOW));
+//		Bundle blueprintIoBundle = findBundle("org.eclipse.gemini.blueprint.io");
+//		update.getConditionalPermissionInfos()
+//				.add(permissionAdmin.newConditionalPermissionInfo(null,
+//						new ConditionInfo[] { new ConditionInfo(BundleLocationCondition.class.getName(),
+//								new String[] { blueprintIoBundle.getLocation() }) },
+//						new PermissionInfo[] { new PermissionInfo(RuntimePermission.class.getName(), "*", null),
+//								new PermissionInfo(AdminPermission.class.getName(), "*", "*"), },
+//						ConditionalPermissionInfo.ALLOW));
 
 		// Equinox
 		Bundle registryBundle = findBundle("org.eclipse.equinox.registry");