Script Security

Scripts are executed in server JVM and their permissions are not restricted in any way. Thereby a single unintentional error in a script, or some malicious code, may cause the server to function improperly, hang, seize 100% CPU time, corrupt its database or even corrupt data on the machine running it. By default, only the default administrator may modify and execute scripts. Give only trusted users permissions to modify and execute scripts.

If a script can be substituted by an expression, it's always advised to go for this substitution, since expression security mechanism ensures that calling party's permissions are inherited by all expression's operations.

To let another user execute scripts, set his permission level in Scripts context to Admin. This will allow the user to execute all scripts in this context.

To allow execution of a single script, set the user's permission level in that Script context to Admin.

Only users that have Administrator effective permission level in the Script context may modify script configuration and code. This ensures maximum security for script operations.

Was this page helpful?

Tell us more

Send

Thank you!