Contribution org.nuxeo.ecm.automation.server.bindings--bindings

In component org.nuxeo.ecm.automation.server.bindings

This contribution is part of XML component org.nuxeo.ecm.automation.server.bindings inside nuxeo-automation-server-2023.14.23.jar /OSGI-INF/binding-contrib.xml

Extension Point

Extension point bindings of component AutomationServer.

Registration Order

The registration order represents the order in which this contribution was registered on its target extention point. This will impact the override/merge behaviour when it is implemented on the target service, and is useful for proper customization of existing contributions.
You can influence this order by adding "require" tags in the containing component declaration, to make sure it is resolved after another component (see "Resolution Order" on components).

Contributed Items

<binding name="Blob.CreateFromURL">
      <administrator>true</administrator>
    </binding>

binding Blob.CreateFromURL

<binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>

binding Blob.Post

<binding name="Blob.ExportToFS">
      <administrator>true</administrator>
    </binding>

binding Blob.ExportToFS

<binding name="Document.Mail">
      <administrator>true</administrator>
    </binding>

binding Document.Mail

<binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>

binding Directory.Entries

<binding name="RunInputScript">
      <administrator>true</administrator>
    </binding>

binding RunInputScript

<binding name="RunScript">
      <administrator>true</administrator>
    </binding>

binding RunScript

<binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>

binding Counters.GET

<binding name="Document.CreateLiveProxy">
      <administrator>true</administrator>
    </binding>

binding Document.CreateLiveProxy

XML Source

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- don't allow GET of arbitrary URLs on the server -->
    <binding name="Blob.CreateFromURL">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow POST of arbitrary URLs on the server -->
    <binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow write of arbitrary files on the server -->
    <binding name="Blob.ExportToFS">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow arbitrary email sending on the server -->
    <binding name="Document.Mail">
      <administrator>true</administrator>
    </binding>

    <!-- protect access to directories -->
    <binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>
    <!-- protect arbitrary script execution -->
    <binding name="RunInputScript">
      <administrator>true</administrator>
    </binding>
    <binding name="RunScript">
      <administrator>true</administrator>
    </binding>
    <!-- protect counter access -->
    <binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>
    <!-- protect proxy creation -->
    <binding name="Document.CreateLiveProxy">
      <administrator>true</administrator>
    </binding>
  </extension>