Service Task Class Whitelisting

[alfresco1576]

Hi,

I was trying to whitelist the JavaScript classes to get more control over execution of JavaScript classes in the Script task but after enabling some required services to 'true' in properties file, I got following error:

Access to Java class "org.activiti.engine.impl.persistence.entity.ExecutionEntity" is prohibited. 

Following are the steps I executed to enabled servies:

1.  Added the script types in activiti-app/WEB-INF/classes/activiti/whitelisted-scripts.conf:
   • javascript
   • js
   • ecmascript
   • groovy
   • juel
2. Enabled javascript.secure-scripting.enabled=true
3. Set javascript.secure-scripting.enable-class-whitelisting=true
4. Added following to activiti-app/WEB-INF/classes/activiti/javascript-whitelist-classes.conf:
   • java.lang.System
   • java.util.ArrayList
   • org.apache.tomcat.util.log.SystemLogHandler

Is there anything that I missed here? 

Thanks for help.

[openpj]

Check other settings from the APS SDK here:

https://github.com/OpenPj/alfresco-process-services-project-sdk/tree/master/aps-extensions-jar/src/t...

Hope this helps

[alfresco1576]

Hi @openpj, 

Thanks for reply.

I have not made changes to the following properties files/classes:

• beans-whitelist.conf
• call-whitelist.conf
• log4j.properties
• shell-commands-whitelist.conf
• version.properties
• whitelisted-classes.conf

Is it required to do so? I believe Whitelisting JavaScript is alternative to Bean Whitelisting.