Platform Explorer / Nuxeo Platform 2023.9

Component org.nuxeo.ecm.automation.server.bindings

In bundle org.nuxeo.ecm.automation.server

Resolution Order

72
The resolution order represents the order in which this component has been resolved by the Nuxeo Runtime framework.
You can influence this order by adding "require" tags in your component declaration, to make sure it is resolved after another component.

Contributions

XML Source

<?xml version="1.0"?>
<component name="org.nuxeo.ecm.automation.server.bindings"
  version="1.0">

  <extension target="org.nuxeo.ecm.automation.server.AutomationServer"
    point="bindings">
    <!-- don't allow GET of arbitrary URLs on the server -->
    <binding name="Blob.CreateFromURL">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow POST of arbitrary URLs on the server -->
    <binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow write of arbitrary files on the server -->
    <binding name="Blob.ExportToFS">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow arbitrary email sending on the server -->
    <binding name="Document.Mail">
      <administrator>true</administrator>
    </binding>

    <!-- protect access to directories -->
    <binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>
    <!-- protect arbitrary script execution -->
    <binding name="RunInputScript">
      <administrator>true</administrator>
    </binding>
    <binding name="RunScript">
      <administrator>true</administrator>
    </binding>
    <!-- protect counter access -->
    <binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>
    <!-- protect proxy creation -->
    <binding name="Document.CreateLiveProxy">
      <administrator>true</administrator>
    </binding>
  </extension>

</component>