Contribution org.nuxeo.ecm.automation.server.bindings--bindings

In component org.nuxeo.ecm.automation.server.bindings

This contribution is part of XML component org.nuxeo.ecm.automation.server.bindings inside nuxeo-automation-server-5.8.jar

Extension Point

Extension point bindings of component AutomationServer.

Contributed Items

<binding name="Blob.Create">
      <administrator>true</administrator>
    </binding>

binding Blob.Create

<binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>

binding Blob.Post

<binding name="Blob.ToFile">
      <administrator>true</administrator>
    </binding>

binding Blob.ToFile

<binding name="Notification.SendMail">
      <administrator>true</administrator>
    </binding>

binding Notification.SendMail

<binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>

binding Directory.Entries

<binding name="Context.RunInputScript">
      <administrator>true</administrator>
    </binding>

binding Context.RunInputScript

<binding name="Context.RunScript">
      <administrator>true</administrator>
    </binding>

binding Context.RunScript

<binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>

binding Counters.GET

XML Source

<extension point="bindings" target="org.nuxeo.ecm.automation.server.AutomationServer">
    <!-- don't allow GET of arbitrary URLs on the server -->
    <binding name="Blob.Create">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow POST of arbitrary URLs on the server -->
    <binding name="Blob.Post">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow write of arbitrary files on the server -->
    <binding name="Blob.ToFile">
      <administrator>true</administrator>
    </binding>
    <!-- don't allow arbitrary email sending on the server -->
    <binding name="Notification.SendMail">
      <administrator>true</administrator>
    </binding>

    <!-- protect access to directories -->
    <binding name="Directory.Entries">
      <administrator>true</administrator>
    </binding>
    <!-- protect arbitrary script execution -->
    <binding name="Context.RunInputScript">
      <administrator>true</administrator>
    </binding>
    <binding name="Context.RunScript">
      <administrator>true</administrator>
    </binding>
    <!-- protect counter access -->
    <binding name="Counters.GET">
      <administrator>true</administrator>
    </binding>
  </extension>