nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Run shell commands from scripts

janco

I was searching the alfresco wiki and forums, but didnt find anything about this.

Is it possible to run shell commands from scripts? I mean from the scripts that are in "Company Home > Data Dictionary > Scripts". I know its a javascript but as I am looking on the examples there looks like its accessing local resources (like spaces,docs etc.)
So again: Is it possible to run shell commands from scripts?

Thanks in advace

Jan

Find more posts tagged with

Comments

jbarmash

I would guess not (with about 60% confidence level).

We use Rhino as an engine for server-side JavaScript. The way it works is that you need explicitly expose certain Java objects as Java. I don't believe low-level functionality of Java is exposed.

Even if it is possible, then it should not be, since that would introduce a security problem - people could then upload a script that starts interacting with the server file system - not a good idea. I thought i saw some checkins recently around improving security of these scripts.

On the other hand, the scripts that are deployed on a file system don't have the same security problem, but I am not sure if you could write to the filesystem from there.

pmonks

You're spot on Jean. Scripts stored in the repository run in a sandbox that prevents the code from doing anything dangerous (including things like calling Java APIs and, by extension, invoking OS commands / scripts) - this is to prevent users from uploading and running scripts that inadvertently or maliciously damage the system (or worse!).

That said, Alfresco v2.1.3 and above include a change that enables scripts stored wholely within the classpath to access native Java APIs (which allows all sorts of logic, including invocation of OS level commands / scripts). The reasoning here is that if a developer has sufficient privileges to manipulate the Alfresco classpath, there's not a lot Alfresco can do to prevent inadvertent / malicious damage to the system by that person (since they have direct filesystem access to the server).

mir4ge

Don't if the following can be useful to you… but…

I think that you could use the Java Runtime class ( http://java.sun.com/j2se/1.3/docs/api/java/lang/Runtime.html )
as a wrapper, passing your shell commands through strings…

You could refer to the source code of the RuntimeExecutableContentTransformer class ( http://wiki.alfresco.com/wiki/Content_Transformations )
which is embedded in Alfresco…