/*
* Copyright (c) 2008 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:
*
*/

package javax.microedition.io;

import java.security.Permission;
import java.security.PermissionCollection;

/**
 * This class represents access rights to connections via the "ssl" protocol.
 * A SSLProtocolPermission consists of a URI string but no actions list.
 * <p>
 * The URI string specifies a socket stream connection. It takes the following
 * general form:
 * <p>
 * ssl://{host}:{portspec}
 * <p>
 * The exact syntax for the SSLProtocolPermission URI is provided by this BNF.
 * The value of the {host} field must be a symbolic hostname, a literal IPv4
 * address or a literal IPv6 address, as specified by RFC 3986. If the {host}
 * string is a DNS name, an asterisk may appear in the leftmost position to
 * indicate a match of 1 or more entire domain labels. Partial domain label
 * matches are not permitted, therefore "*.sun.com" is valid, but "*sun.com"
 * is not. An asterisk by itself matches all hosts.
 * <p>
 * The {portspec} string takes the following form:
 * <p>
 * portnumber | -portnumber | portnumber-[portnumber] | "*"
 * <p>
 * A {portspec} specification of the form "N-" (where N is a port number)
 * signifies all ports numbered N and above, while a specification of the form
 * "-N" indicates all ports numbered N and below. A single asterisk in the
 * place of the {portspec}  field matches all ports. Therefore, the URI
 * "ssl://*:*" matches secure connections to all hosts on all ports.
 *
 * @see Connector.open(java.lang.String)
 * @see "javax.microedition.io.SecureConnection" in MIDP 3.0 Specification
 *
 * @author Nokia Corporation
 * @version 1.0
 */
public final class SSLProtocolPermission
        extends GCFPermission
{
    /**
     * Creates a new SSLProtocolPermission with the specified URI as its
     * name. The URI string must conform to the specification given above,
     * and is normalized  to facilitate subsequent comparisons.
     *
     * @param uri the URI string.
     * @throws IllegalArgumentException if uri is malformed.
     * @throws NullPointerException if uri is null.
     */
    public SSLProtocolPermission(String uri)
    {
        super(uri);
    }

    /**
     * Checks if this SSLProtocolPermission object "implies" the
     * specified permission.
     * <p>
     * Because the {host} field of the permission URI may indicate an
     * individual host by means of either a symbolic hostname or an IP
     * address, a thorough evaluation of the implies relation between
     * two SSLProtocolPermission objects requires the underlying
     * platform to be able to transform symbolic hostnames into IP
     * addresses (via address lookup) and vice-versa (via name lookup).
     * Either service may be unavailable on a given platform. As a result,
     * the comparison of URI strings from two permissions can only be
     * best-effort. For each SSLProtocolPermission constructed with a
     * URI that contains a {host} field, the implementation will attempt
     * to determine both the fully-qualified domain name (the "canonical
     * name") and the IP address(es) of the host. However, either value
     * may be unknown.
     * <p>
     * To determine whether this object implies another permission, p,
     * this method first ensures that all of the following are true
     * (and returns false if any of them are not):
     * <ul>
     * <li>p is an instanceof SSLProtocolPermission, and</li>
     * <li>p's port range is included in this port range</li>
     * </ul>
     * Then implies checks each of the following, in order, and for each
     * returns true if the stated condition is true:
     * <ul>
     * <li>If this object has a single IP address and one of p's IP addresses
     * is equal to this object's IP address.</li>
     * <li>If this object has a wildcard domain (such as *.sun.com), and p's
     * absolute name (the name with any preceding * removed) ends with this
     * object's absolute name. For example, *.sun.com implies *.eng.sun.com.
     * </li>
     * <li>If this object has multiple IP addresses, and one of this object's
     * IP addresses equals one of p's IP addresses.</li>
     * <li>If this object's canonical name equals p's canonical name.</li>
     * </ul>
     * If none of the above are true, implies returns false.
     *
     * @param p the permission to check against.
     * @return true if the specified permission is implied by this object,
     *        false if not.
     */
    public boolean implies(Permission p)
    {
        if (p instanceof SSLProtocolPermission)
        {
            return true;
        }
        return false;
    }

    /**
     * Checks two SSLProtocolPermission objects for equality.
     *
     * @param obj the object we are testing for equality with this object.
     * @return true if obj is a SSLProtocolPermission and has the same
     *         URI string as this SSLProtocolPermission object.
     */
    public boolean equals(Object obj)
    {
        return true;
    }

    /**
     * Returns the hash code value for this object. The hash code used is the
     * hash code of this permissions name, that is, getName().hashCode(),
     * where getName is from the Permission superclass
     *
     * @return a hash code value for this object.
     */
    public int hashCode()
    {
        return 0;
    }

    /**
     * Returns the canonical string representation of the actions, which
     * currently is the empty string "", since there are no actions defined
     * for SSLProtocolPermission.
     *
     * @return the empty string "".
     */
    public String getActions()
    {
        return "";
    }

    /**
     * Returns a new PermissionCollection for storing
     * SSLProtocolPermission objects.
     * <p>
     * SSLProtocolPermission objects must be stored in a manner that allows
     * them to be inserted into the collection in any order, but that also
     * enables the PermissionCollection implies method to be implemented in an
     * efficient (and consistent) manner.
     *
     * @return a new PermissionCollection suitable for storing
     *         SSLProtocolPermission objects.
     */
    public PermissionCollection newPermissionCollection()
    {
        return null;
    }
}