Difference between BasicProxyPreparer and VerifyingProxyPreparer?

[Esmond Pitt FACS]

Subject says it all really. I've read the Javadoc and even the source code
and I can see that they are doing slightly different things, but what? and
for what purpose? when would I use one rather than the other?

TIA

EJP

--------------------------------------------------------------------------
Getting Started:     http://www.jini.org/wiki/Category:Getting_Started
Community Web Site:  http://jini.org
jini-users Archive:  http://archives.java.sun.com/archives/jini-users.html
Unsubscribing:       email "signoff JINI-USERS"  to listserv@...

[Peter Jones - JavaSoft East]

On Mon, Mar 30, 2009 at 03:31:50AM -0600, Esmond Pitt wrote:
> Subject says it all really. I've read the Javadoc and even the
> source code and I can see that they are doing slightly different
> things, but what? and for what purpose? when would I use one rather
> than the other?

There was some discussion in this thread:

    http://archives.java.sun.com/cgi-bin/wa?A2=ind0702&L=JINI-USERS&P=7651
    http://archives.java.sun.com/cgi-bin/wa?A2=ind0702&L=JINI-USERS&P=8722
    ...

The primary motivation was to facilitate specifying, in a
configuration file, arbitrary context elements, like a
BasicUntrustedObjectSecurityContext, to use for the
Security.verifyObjectTrust invocation (whereas BasicProxyPreparer
always uses the specified constraints as the sole context element).

-- Peter

--------------------------------------------------------------------------
Getting Started:     http://www.jini.org/wiki/Category:Getting_Started
Community Web Site:  http://jini.org
jini-users Archive:  http://archives.java.sun.com/archives/jini-users.html
Unsubscribing:       email "signoff JINI-USERS"  to listserv@...

[Esmond Pitt FACS]

Thanks Peter

> context elements

Is there a proper definition of that somewhere other than 'determined by its
type'?

TIA

EJP

--------------------------------------------------------------------------
Getting Started:     http://www.jini.org/wiki/Category:Getting_Started
Community Web Site:  http://jini.org
jini-users Archive:  http://archives.java.sun.com/archives/jini-users.html
Unsubscribing:       email "signoff JINI-USERS"  to listserv@...

[Peter Jones - JavaSoft East]

On Mon, Mar 30, 2009 at 05:11:00PM -0600, Esmond Pitt wrote:
>> context elements
>
> Is there a proper definition of that somewhere other than
> 'determined by its type'?

The classes that implement TrustVerifier specify how they use those
context elements, if at all.  If I recall correctly, of the trust
verifier classes in the starter kit, only ProxyTrustVerifier uses
them: both for the constraints for the ProxyTrust.getProxyVerifier
remote invocation on the bootstrap proxy (must be specified), and the
UntrustedObjectSecurityContext for invoking methods on not-yet-trusted
classes (optional, defaults to a very restrictive security context).

-- Peter

--------------------------------------------------------------------------
Getting Started:     http://www.jini.org/wiki/Category:Getting_Started
Community Web Site:  http://jini.org
jini-users Archive:  http://archives.java.sun.com/archives/jini-users.html
Unsubscribing:       email "signoff JINI-USERS"  to listserv@...