Extension point bindings

In component org.nuxeo.ecm.automation.server.AutomationServer

Documentation

Rest security bindings on operations

Contribution Descriptors

Class: org.nuxeo.ecm.automation.server.RestBinding

Existing Contributions

Contributions are presented in the same order as the registration order on this extension point. This order is displayed before the contribution name, in brackets.

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- don't allow direct access to Audit log -->
    <binding name="Audit.Query">
      <administrator>true</administrator>
    </binding>
    <binding name="Audit.QueryWithPageProvider">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow direct access to user operations -->
    <binding name="User.CreateOrUpdate">
      <administrator>true</administrator>
    </binding>
    <binding name="Group.CreateOrUpdate">
      <administrator>true</administrator>
    </binding>
    <binding name="Bulk.WaitForAction">
      <administrator>true</administrator>
    </binding>
    <binding name="Metrics.Start">
      <administrator>true</administrator>
    </binding>
    <binding name="Metrics.Stop">
      <administrator>true</administrator>
    </binding>
  </extension>

(0) nuxeo-automation-features-2023.20.15.jar/OSGI-INF/bindings-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- don't allow GET of arbitrary URLs on the server -->
    <binding name="Blob.CreateFromURL">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow POST of arbitrary URLs on the server -->
    <binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow write of arbitrary files on the server -->
    <binding name="Blob.ExportToFS">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow arbitrary email sending on the server -->
    <binding name="Document.Mail">
      <administrator>true</administrator>
    </binding>

    <!-- protect access to directories -->
    <binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>
    <!-- protect arbitrary script execution -->
    <binding name="RunInputScript">
      <administrator>true</administrator>
    </binding>
    <binding name="RunScript">
      <administrator>true</administrator>
    </binding>
    <!-- protect counter access -->
    <binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>
    <!-- protect proxy creation -->
    <binding name="Document.CreateLiveProxy">
      <administrator>true</administrator>
    </binding>
  </extension>

(1) nuxeo-automation-server-2023.20.15.jar/OSGI-INF/binding-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- Protect Nuxeo Drive integration test operations -->
    <binding name="NuxeoDrive.SetupIntegrationTests">
      <administrator>true</administrator>
    </binding>
    <binding name="NuxeoDrive.TearDownIntegrationTests">
      <administrator>true</administrator>
    </binding>
    <binding name="NuxeoDrive.WaitForAsyncCompletion">
      <administrator>true</administrator>
    </binding>
    <binding name="NuxeoDrive.SetVersioningOptions">
      <administrator>true</administrator>
    </binding>
    <binding name="NuxeoDrive.CreateTestDocuments">
      <administrator>true</administrator>
    </binding>
    <binding name="NuxeoDrive.SetActiveFactories">
      <administrator>true</administrator>
    </binding>
  </extension>

(2) nuxeo-drive-operations-2023.20.15.jar/OSGI-INF/nuxeodrive-automation-bindings-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <binding name="Elasticsearch.Index">
      <administrator>true</administrator>
    </binding>
    <binding name="Elasticsearch.WaitForIndexing">
      <administrator>true</administrator>
    </binding>
    <binding name="Elasticsearch.BulkIndex">
      <administrator>true</administrator>
    </binding>
  </extension>

(3) nuxeo-elasticsearch-automation-2023.20.15.jar/OSGI-INF/operations-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">

    <binding name="Picture.RecomputeViews">
      <administrator>true</administrator>
    </binding>

  </extension>

(4) nuxeo-platform-imaging-core-2023.20.15.jar/OSGI-INF/operations-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <binding name="org.nuxeo.ecm.quota.automation.RecomputeQuotaStatistics">
      <administrator>true</administrator>
    </binding>
  </extension>

(5) nuxeo-quota-2023.20.15.jar/OSGI-INF/operations-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- Protect Nuxeo Drive integration test operations -->
    <binding name="NuxeoDrive.WaitForElasticsearchCompletion">
      <administrator>true</administrator>
    </binding>
  </extension>

(6) nuxeo-drive-elasticsearch-2023.20.15.jar/OSGI-INF/nuxeodrive-elasticsearch-automation-bindings-contrib.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <binding name="Salesforce.ConfigProvider"/>
    <binding name="Salesforce.ValidateConnection"/>
    <binding name="Salesforce.LinkDocument"/>
  </extension>

(7) nuxeo-salesforce-core-2023.0.2.jar/OSGI-INF/SalesforceComponent.xml Override

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <binding name="RecomputeThumbnails">
      <administrator>true</administrator>
    </binding>
  </extension>

(8) nuxeo-thumbnail-2023.20.15.jar/OSGI-INF/thumbnail-operations-contrib.xml Override