[JEXL-419] Add permission syntax to allow class/method/field

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3
• Fix Version/s: 3.4.0
• Assignee: Henri Biestro
• Reporter: Henri Biestro
• Created: 27/Jan/24 17:11
• Updated: 28/Jan/24 10:38
• Resolved: 28/Jan/24 10:38

Description

WHAT
The class permissions can only deny access to methods/fields. It is cumbersome to use when only a few methods need to be allowed. Adding a syntax to explicitly allow class members would also enable easier composition from the RESTRICTED permissions.

HOW
Add a +/- (default is -) in front of class name in permissions for the parser to determine whether an allow or deny set is to be created.
Example:

final String src = "java.lang { +Class { getName(); getSimpleName(); } }";
final JexlPermissions p = RESTRICTED.compose(src);