CODE EXAMPLE 4-12Server Test Component Example (Continued)

}

}

}

}

Testing Security-Constrained Functionality With Security Tests

This section addresses writing different types of security tests, using keywords and attributes to mark different types of security tests, and using attributes in the test description to grant or deny the security permissions for the tests.

Types of Security Tests

Security related tests can be grouped into the following types:

Untrusted

Trusted

Double-duty

Untrusted Tests

Untrusted tests verify API implementation behavior for unsigned MIDlet Suites. Untrusted tests verify that the assertions related to untrusted MIDlet suites are properly implemented.

All untrusted MIDlet suites can run in a restricted environment where access to protected APIs or functions is either not allowed, or allowed only with explicit user permission. Untrusted tests must not be run in trusted security mode. See “Marking Untrusted Tests” on page 61 for a description of how to use keywords to mark untrusted tests.

60 Java ME TCK Framework Developer’s Guide • July 2007

Page 80
Image 80
Sun Microsystems 1.2 manual Types of Security Tests, Untrusted Tests