/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.sun.jini.phoenix;

import java.io.IOException;
import java.net.InetAddress;
import java.net.NetworkInterface;
import java.rmi.server.ServerNotActiveException;
import java.security.AccessControlException;
import java.util.HashMap;
import java.util.Map;
import net.jini.export.ServerContext;
import net.jini.io.context.ClientHost;

/**
 * @author Sun Microsystems, Inc.
 * 
 * @since 2.0
 */
class LocalAccess {
    private static Map cache = new HashMap(3);

    private LocalAccess() {
    }

    public static synchronized void check() {
	ClientHost host = null;
	try {
	    host = (ClientHost)
		ServerContext.getServerContextElement(ClientHost.class);
	} catch (ServerNotActiveException e) {
	    return;
	}
	if (host == null) return;
	InetAddress addr = host.getClientHost();
	Boolean ok = (Boolean) cache.get(addr);
	if (ok == null) {
	    try {
		ok = Boolean.valueOf(NetworkInterface.getByInetAddress(
					addr) != null);
	    } catch (IOException e) {
		ok = Boolean.FALSE;
	    }
	    cache.put(addr, ok);
	}
	if (!ok.booleanValue()) {
	    throw new AccessControlException("origin is non-local host");
	}
    }
}

@@ -1147,16 +1147,95 @@
 t;%0A%0A/**%0A
+ * Definition of an access control only allowing calls from the local host.%0A *%0A
  * @auth
@@ -1260,16 +1260,16 @@
 s, Inc.%0A
-
  * %0A * @
@@ -1385,16 +1385,671 @@
 %0A    %7D%0A%0A
+    /**%0A     * Checks whether a call was made by a local host.%0A     * Specifically, this means that if, in the dispatched call,%0A     * there is a ServerContext and it contains an element%0A     * that is an instance of ClientHost, then if the InetAddress%0A     * returned by ClientHost.getClientHost is not a local%0A     * network interface (according to NetworkInterface.getByInetAddress)%0A     * or not a loopback address%0A     * (according to NetworkInterface.isLoopBackAddress),%0A     * the call will be rejected; in all other cases,%0A     * the call will be accepted.%0A     * %0A     * @throws AccessControlException when the origin is not a local host%0A     */%0A
     publ
@@ -2420,16 +2420,33 @@
 .valueOf
+(addr != null && 
 (Network
@@ -2491,16 +2491,45 @@
  != null
+ %7C%7C addr.isLoopbackAddress())
 );%0A%09    

allow all loopback addresses to be considered as local