Record Class FileSystemPolicy

java.lang.Object
java.lang.Record
org.j7m.middleware.api.isolation.FileSystemPolicy
Record Components:
denyAllByDefault - whether unmatched paths are denied
rules - ordered immutable rules
public record FileSystemPolicy(boolean denyAllByDefault, List<FileSystemRule> rules) extends Record
Filesystem policy for J7M-provided access checks and process working directory validation.

The policy is immutable. It normalizes paths before evaluation and denies traversal that escapes an allowed root. Symlink behavior depends on the provider and host filesystem; providers must document whether they resolve links before access.

  • Constructor Details

    • FileSystemPolicy

      public FileSystemPolicy(boolean denyAllByDefault, List<FileSystemRule> rules)
      Creates a validated filesystem policy.

  • Method Details

    • denyAll

      public static FileSystemPolicy denyAll()
      Creates a deny-all filesystem policy.
      Returns:
      deny-all policy

    • toString

      public final String toString()
      Returns a string representation of this record class. The representation contains the name of the class, followed by the name and value of each of the record components.
      Specified by:
      toString in class Record
      Returns:
      a string representation of this object

    • hashCode

      public final int hashCode()
      Returns a hash code value for this object. The value is derived from the hash code of each of the record components.
      Specified by:
      hashCode in class Record
      Returns:
      a hash code value for this object

    • equals

      public final boolean equals(Object o)
      Indicates whether some other object is "equal to" this one. The objects are equal if the other object is of the same class and if all the record components are equal. Reference components are compared with Objects::equals(Object,Object); primitive components are compared with the compare method from their corresponding wrapper classes.
      Specified by:
      equals in class Record
      Parameters:
      o - the object with which to compare
      Returns:
      true if this object is the same as the o argument; false otherwise.

    • denyAllByDefault

      public boolean denyAllByDefault()
      Returns the value of the denyAllByDefault record component.
      Returns:
      the value of the denyAllByDefault record component

    • rules

      public List<FileSystemRule> rules()
      Returns the value of the rules record component.
      Returns:
      the value of the rules record component