0N/A/*
2362N/A * Copyright (c) 2001, 2003, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
2362N/A * published by the Free Software Foundation. Oracle designates this
0N/A * particular file as subject to the "Classpath" exception as provided
2362N/A * by Oracle in the LICENSE file that accompanied this code.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/Apackage com.sun.jmx.snmp.internal;
0N/A
0N/Aimport com.sun.jmx.snmp.SnmpStatusException;
0N/Aimport com.sun.jmx.snmp.SnmpOid;
0N/Aimport com.sun.jmx.snmp.SnmpPdu;
0N/A/**
0N/A * Access Control Model interface. Every access control model must implement this interface in order to be integrated in the engine based framework.
0N/A * <p><b>This API is a Sun Microsystems internal API and is subject
0N/A * to change without notice.</b></p>
0N/A * @since 1.5
0N/A */
0N/Apublic interface SnmpAccessControlModel extends SnmpModel {
0N/A /**
0N/A * Method called by the dispatcher in order to control the access at an <CODE>SnmpOid</CODE> Level. If access is not allowed, an <CODE>SnmpStatusException</CODE> is thrown.
0N/A * This method is called after the <CODE>checkPduAccess</CODE> pdu based method.
0N/A * @param version The SNMP protocol version number.
0N/A * @param principal The request principal.
0N/A * @param securityLevel The request security level as defined in <CODE>SnmpEngine</CODE>.
0N/A * @param pduType The pdu type (get, set, ...).
0N/A * @param securityModel The security model ID.
0N/A * @param contextName The access control context name.
0N/A * @param oid The OID to check.
0N/A */
0N/A public void checkAccess(int version,
0N/A String principal,
0N/A int securityLevel,
0N/A int pduType,
0N/A int securityModel,
0N/A byte[] contextName,
0N/A SnmpOid oid)
0N/A throws SnmpStatusException;
0N/A /**
0N/A * Method called by the dispatcher in order to control the access at an SNMP pdu Level. If access is not allowed, an <CODE>SnmpStatusException</CODE> is thrown. In case of exception, the access control is aborted. OIDs are not checked.
0N/A * This method should be called prior to the <CODE>checkAccess</CODE> OID based method.
0N/A * @param version The SNMP protocol version number.
0N/A * @param principal The request principal.
0N/A * @param securityLevel The request security level as defined in <CODE>SnmpEngine</CODE>.
0N/A * @param pduType The pdu type (get, set, ...).
0N/A * @param securityModel The security model ID.
0N/A * @param contextName The access control context name.
0N/A * @param pdu The pdu to check.
0N/A */
0N/A public void checkPduAccess(int version,
0N/A String principal,
0N/A int securityLevel,
0N/A int pduType,
0N/A int securityModel,
0N/A byte[] contextName,
0N/A SnmpPdu pdu)
0N/A throws SnmpStatusException;
0N/A
0N/A /**
0N/A * Enable SNMP V1 and V2 set requests. Be aware that can lead to a security hole in a context of SNMP V3 management. By default SNMP V1 and V2 set requests are not authorized.
0N/A * @return boolean True the activation suceeded.
0N/A */
0N/A public boolean enableSnmpV1V2SetRequest();
0N/A /**
0N/A * Disable SNMP V1 and V2 set requests. By default SNMP V1 and V2 set requests are not authorized.
0N/A * @return boolean True the deactivation suceeded.
0N/A */
0N/A public boolean disableSnmpV1V2SetRequest();
0N/A
0N/A /**
0N/A * The SNMP V1 and V2 set requests authorization status. By default SNMP V1 and V2 set requests are not authorized.
0N/A * @return boolean True SNMP V1 and V2 requests are authorized.
0N/A */
0N/A public boolean isSnmpV1V2SetRequestAuthorized();
0N/A}