For the sake of posterity, I ended up using a dynamic proxy. The
invocation handler matches the name of the method being called against
a whitelist (a HashSet of method names) and throws an
UnsupportedOperationException if the method name isn't in the whitelist.
The only fly in the ointment is the need to handle getMetaData()
specially and return a ResultSetMetaData proxy which whitelists every
method except unwrap().
There is no standard way to pass an unmodifiable ResultSet back, perhaps because it's a really bad idea. ResultSets carry all sorts of database connection and Statement state with them, so exposing that through a callback is a layer violation and a flat-out request for disaster. Don't do it.
.... which is why I need the unmodifiable "view" that gives the callback
read-only access to the current row. (I probably should have stated it
that way in my original post.)
Also, the _raison d'etre_ for ResultSet is to perform 'next()' and other such calls. Asking for a ResultSet on which you don't wish to do the fundamental operations is a red flag that you're heading the wrong way down Fubar Path.
The method that's iterating through the ResultSet obviously needs to
call next(), etc. As I said in my original post, the callback method
"has no business" changing the state of the ResultSet.
The standard approach is to unwrap the data from the ResultSet into an object within your domain model and pass that back. The object with the callback almost certainly doesn't want the relational model but a domain model anyway.
In fact, the class with the callback is a subclass of the class with
the "iterator" method, and it will "want" the relational model if I
write it that way.
The "iterator" method is also very general, so there isn't any way to
construct a particularly useful object for it to pass back. I could use
a Map said:
You should consider JPA. And perhaps take a course in object-oriented design.
Perhaps, but I'll venture that the latter is quite a conclusion to
reach from the information provided.