Class SecuredConfigFileSettingAccessPermission

java.lang.Object
java.security.Permission
java.security.BasicPermission
org.elasticsearch.SecuredConfigFileSettingAccessPermission
All Implemented Interfaces:
Serializable, Guard

public class SecuredConfigFileSettingAccessPermission extends BasicPermission
A permission granted to ensure secured access to a file specified by a setting in the config directory.

By granting this permission with a setting key (wildcards are supported), the files pointed to by the settings are secured from general access by Elasticsearch and other Elasticsearch plugins. All code that does not have a secured permission on the same file will be denied all read/write access to that file. Note that you also need to wrap any access to secured files in an AccessController.doPrivileged() block as Elasticsearch itself is denied access to files secured by plugins.

See Also:
  • Constructor Details

    • SecuredConfigFileSettingAccessPermission

      public SecuredConfigFileSettingAccessPermission(String setting)