The target name is the name of a security configuration parameter (see below). Currently the AuthPermission object is used to guard access to the Policy, Subject, LoginContext, and Configuration objects.

The possible target names for an Authentication Permission are:

        doAs -                  allow the caller to invoke the
                                Subject.doAs methods.

        doAsPrivileged -        allow the caller to invoke the
                                Subject.doAsPrivileged methods.

        getSubject -            allow for the retrieval of the
                                Subject(s) associated with the
                                current Thread.

        getSubjectFromDomainCombiner -  allow for the retrieval of the
                                Subject associated with the
                                a SubjectDomainCombiner.

        setReadOnly -           allow the caller to set a Subject
                                to be read-only.

        modifyPrincipals -      allow the caller to modify the Set
                                of Principals associated with a
                                Subject

        modifyPublicCredentials - allow the caller to modify the
                                Set of public credentials
                                associated with a Subject

        modifyPrivateCredentials - allow the caller to modify the
                                Set of private credentials
                                associated with a Subject

        refreshCredential -     allow code to invoke the refresh
                                method on a credential which implements
                                the Refreshable interface.

        destroyCredential -     allow code to invoke the destroy
                                method on a credential object
                                which implements the Destroyable
                                interface.

        createLoginContext.{name} -  allow code to instantiate a
                                LoginContext with the
                                specified name.  name
                                is used as the index into the installed login
                                Configuration
                                (that returned by
                                Configuration.getConfiguration()).
                                name can be wildcarded (set to '*')
                                to allow for any name.

        getLoginConfiguration - allow for the retrieval of the system-wide
                                login Configuration.

        createLoginConfiguration.{type} - allow code to obtain a Configuration
                                object via
                                Configuration.getInstance.

        setLoginConfiguration - allow for the setting of the system-wide
                                login Configuration.

        refreshLoginConfiguration - allow for the refreshing of the system-wide
                                login Configuration.
 

The following target name has been deprecated in favor of createLoginContext.{name}.

        createLoginContext -    allow code to instantiate a
                                LoginContext.
 

javax.security.auth.Policy has been deprecated in favor of java.security.Policy. Therefore, the following target names have also been deprecated:

        getPolicy -             allow the caller to retrieve the system-wide
                                Subject-based access control policy.

        setPolicy -             allow the caller to set the system-wide
                                Subject-based access control policy.

        refreshPolicy -         allow the caller to refresh the system-wide
                                Subject-based access control policy.