package test;

import groovy.lang.GroovyShell;

import java.security.AccessControlContext;

import org.eclipse.equinox.app.IApplication;
import org.eclipse.equinox.app.IApplicationContext;

public class TestSecurity implements IApplication
{
	public static void main(String[] args)
	{
		System.out.println("STARTING!");

		if (System.getSecurityManager() != null)
			throw new RuntimeException("Already configured!");

		System.setProperty("java.security.policy", "/tmp/test.policy");
		System.setSecurityManager(new SecurityManager());

		check(java.security.AccessController.getContext());
		System.out.println("Inline has permission - GOOD");

		GroovyShell shell = new GroovyShell();
		try
		{
			check((AccessControlContext) shell.evaluate("java.security.AccessController.getContext();"));
			System.out.println("Script has permission - BAD!!!");
		}
		catch (java.security.AccessControlException e)
		{
			System.out.println("Script has NO permission - GOOD");
		}
	}

	private static void check(AccessControlContext context)
	{
		context.checkPermission(new java.io.FilePermission("/tmp/foo", "read"));
	}

	@Override
	public Object start(IApplicationContext context) throws Exception
	{
		main(null);
		return IApplication.EXIT_OK;
	}

	@Override
	public void stop()
	{
	}
}

grant codebase "file:/home/pete/-" { permission java.security.AllPermission; };