PRInt16 canEnableCapability ( char* capability )

Arguments:

capability

void disableCapability ( char* capability , inout voidPtr* annotation )

Arguments:

capability

annotation

void enableCapability ( char* capability , inout voidPtr* annotation )

Arguments:

capability

annotation

PRBool equals ( nsIPrincipal other )

Returns whether the other principal is equivalent to this principal. Principals are considered equal if they are the same principal, they have the same origin, or have the same certificate fingerprint ID

Arguments:

other

JSPrincipals* getJSPrincipals ( JSContext* cx )

Returns the JS equivalent of the principal.

Arguments:

cx

void getPreferences ( out char* prefBranch , out char* id , out char* subjectName , out char* grantedList , out char* deniedList , out PRBool isTrusted )

Returns the security preferences associated with this principal. prefBranch will be set to the pref branch to which these preferences pertain. id is a pseudo-unique identifier, pertaining to either the fingerprint or the origin. subjectName is a name that identifies the entity this principal represents (may be empty). grantedList and deniedList are space-separated lists of capabilities which were explicitly granted or denied by a pref. isTrusted is a boolean that indicates whether this is a codebaseTrusted certificate.

Arguments:

prefBranch

id

subjectName

grantedList

deniedList

isTrusted

PRBool isCapabilityEnabled ( char* capability , voidPtr* annotation )

Arguments:

capability

annotation

void revertCapability ( char* capability , inout voidPtr* annotation )

Arguments:

capability

annotation

void setCanEnableCapability ( char* capability , PRInt16 canEnable )

Arguments:

capability

canEnable

PRBool subsumes ( nsIPrincipal other )

Returns whether the other principal is equal to or weaker than this principal. Principals are equal if they are the same object, they have the same origin, or they have the same certificate ID.

Thus a principal always subsumes itself.

The system principal subsumes itself and all other principals.

A null principal (corresponding to an unknown, hence assumed minimally privileged, security context) is not equal to any other principal (including other null principals), and therefore does not subsume anything but itself.

Both codebase and certificate principals are subsumed by the system principal, but no codebase or certificate principal yet subsumes any other codebase or certificate principal. This may change in a future release; note that nsIPrincipal is unfrozen, not slated to be frozen.

XXXbz except see bug 147145!

Note for the future: Perhaps we should consider a certificate principal for a given URI subsuming a codebase principal for the same URI? Not sure what the immediate benefit would be, but I think the setup could make some code (e.g. MaybeDowngradeToCodebase) clearer.

Arguments:

other