File tree Expand file tree Collapse file tree 2 files changed +10
-3
lines changed
libs/entitlement/src/main/java/org/elasticsearch/entitlement Expand file tree Collapse file tree 2 files changed +10
-3
lines changed Original file line number Diff line number Diff line change 1212public interface Instrumenter {
1313
1414 /**
15- * Instruments a class by adding a prologue to check for entitlements to a set of its methods .
15+ * Instruments the appropriate methods of a class by adding a prologue that checks for entitlements.
1616 * The prologue:
1717 * <ol>
1818 * <li>
Original file line number Diff line number Diff line change 175175 * Most of the entitlements are "flag" entitlements: when present, it grants the caller the right to perform an action (or a set of
176176 * actions); when it's not present, the actions associated with it are denied. Checking is simply a fact checking if the entitlement type
177177 * is present or not.
178- * The two exceptions are system properties, where we further get the instance of the entitlement for the
178+ * There are two entitlements that are not simple flags:
179+ * <ul>
180+ * <li>system properties, where we further get the instance of the entitlement for the
179181 * {@link org.elasticsearch.entitlement.runtime.policy.entitlements.WriteSystemPropertiesEntitlement} class, and we check if it contains
180- * that specific property name, and filesystem access, which is treated separately for convenience and performance reasons.
182+ * that specific property name, and
183+ * </li>
184+ * <li>
185+ * file access, which is treated separately for convenience and performance reasons.
181186 * See {@link org.elasticsearch.entitlement.runtime.policy.FileAccessTree} for details.
187+ * </li>
188+ * <ul>
182189 * </p>
183190 * <p>
184191 * A final special cases that short circuit the checks (resulting in a "trivially allowed" case) is when the caller is null is the special
You can’t perform that action at this time.
0 commit comments