Package org.kawanfw.sql.api.server.firewall

Class DenyStatementClassManager

java.lang.Object

org.kawanfw.sql.api.server.firewall.DefaultSqlFirewallManager

org.kawanfw.sql.api.server.firewall.DenyStatementClassManager

All Implemented Interfaces:

SqlFirewallManager

public class DenyStatementClassManager
extends DefaultSqlFirewallManager
implements SqlFirewallManager

Firewall manager that denies any call of the raw Statement class. (Calling Statements without parameters is forbidden).

Since:

4.0

Author:

Nicolas de Pomereu

Constructor Summary

Constructors

Constructor	Description
DenyStatementClassManager()

Method Summary

Modifier and Type	Method	Description
boolean	allowStatementClass(String username, String database, Connection connection)	Allows to define if the passed username is allowed to create and use a Statement instance that is not a PreparedStatement.
void	runIfStatementRefused(SqlEvent sqlEvent, Connection connection)	Logs the info using DefaultDatabaseConfigurator#getLogger() Logger.

Methods inherited from class org.kawanfw.sql.api.server.firewall.DefaultSqlFirewallManager

allowExecute, allowExecuteUpdate, allowMetadataQuery, allowSqlRunAfterAnalysis

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.kawanfw.sql.api.server.firewall.SqlFirewallManager

allowExecute, allowExecuteUpdate, allowMetadataQuery, allowSqlRunAfterAnalysis

Constructor Details

DenyStatementClassManager

public DenyStatementClassManager()

Method Details

allowStatementClass

public boolean allowStatementClass(String username,
String database,
Connection connection)
                            throws IOException,
SQLException

Description copied from interface: SqlFirewallManager

Allows to define if the passed username is allowed to create and use a Statement instance that is not a PreparedStatement.

Specified by:

allowStatementClass in interface SqlFirewallManager

Overrides:

allowStatementClass in class DefaultSqlFirewallManager

Parameters:

username - the client username to check the rule for

database - the database name as defined in the JDBC URL field

connection - The current SQL/JDBC Connection

Returns:

false. (Nobody is allowed to create raw Statement, i.e. call statements without parameters.)

Throws:

IOException - if an IOException occurs

SQLException - if a SQLException occurs

runIfStatementRefused

public void runIfStatementRefused(SqlEvent sqlEvent,
Connection connection)
                           throws IOException,
SQLException

Logs the info using DefaultDatabaseConfigurator#getLogger() Logger.

Specified by:

runIfStatementRefused in interface SqlFirewallManager

Overrides:

runIfStatementRefused in class DefaultSqlFirewallManager

Parameters:

sqlEvent - the SQL event asked by the client side. Contains all info about the SQL call (client username, database name, IP Address of the client, and SQL statement details).

connection - The current SQL/JDBC Connection

Throws:

IOException - if an IOException occurs

SQLException - if a SQLException occurs