Package com.xebialabs.xlrelease.script

Class Jsr223ScriptExecutor

java.lang.Object

com.xebialabs.xlrelease.script.Jsr223ScriptExecutor

All Implemented Interfaces:

ScriptExecutor

Direct Known Subclasses:

JythonScriptExecutor

public abstract class Jsr223ScriptExecutor
extends Object
implements ScriptExecutor

Field Summary

Fields

Modifier and Type	Field	Description
protected final org.slf4j.Logger	logger
protected ScriptEngine	restrictedEngine
protected ScriptPermissionsProvider	scriptPermissionsProvider
protected ScriptEngine	unrestrictedEngine

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	Jsr223ScriptExecutor(Jsr223EngineFactory engineFactory, ScriptPermissionsProvider scriptPermissionsProvider, boolean sandboxEnabled, String workDir)

Method Summary

Modifier and Type	Method	Description
protected void	addCiUtilsPermissions(Permissions permissions)
protected void	addGroovyLibrariesReadPermissions(Permissions minimalPermissions)
protected void	addInternalAccessPermissions(Permissions minimalPermissions)
protected void	addJavaHomeSecurityLibPermissions(Permissions minimalPermissions)
protected void	addJavaPrimitivesPermissions(Permissions minimalPermissions)
protected void	addJsonModule(Permissions permissions)
protected void	addJsonSmartLibraryPermissions(Permissions minimalPermissions)
protected void	addJythonLibrariesReadPermissions(Permissions minimalPermissions)
protected void	addReadPermissionOnJar(List<String> jarNames, Permissions minimalPermissions)
protected void	addReadPermissionOnPluginsFolder(Permissions minimalPermissions)
protected ScriptEngine	configureSandboxAndGetEngine(boolean checkPolicyPermissions)	This method sets threadlocal "sandbox" property that is later used by SandboxAwarePackageManager to restrict packages (class namespaces) that are accessible
protected Permissions	createMinimalPermissions()
protected Object	doPrivileged(ScriptEngine engine, String script, ScriptContext scriptContext, AccessControlContext accessControlContext)
Object	evalScript(XlrScriptContext xlrScriptContext)
protected abstract Object	evalScriptPrivileged(ScriptEngine engine, String script, ScriptContext scriptContext, AccessControlContext accessControlContext)
protected AccessControlContext	getAccessControlContext()
protected String	getWorkDir()
protected boolean	isRestricted(boolean checkPolicyPermissions)
protected Boolean	isScriptSandboxEnabled()
void	reloadScriptEngines()
protected Permission	resolvePermissionIfNecessary(Permission permission)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

protected final org.slf4j.Logger logger

unrestrictedEngine

protected ScriptEngine unrestrictedEngine

restrictedEngine

protected ScriptEngine restrictedEngine

scriptPermissionsProvider

protected ScriptPermissionsProvider scriptPermissionsProvider

Constructor Details

Jsr223ScriptExecutor

protected Jsr223ScriptExecutor(Jsr223EngineFactory engineFactory,
 ScriptPermissionsProvider scriptPermissionsProvider,
 boolean sandboxEnabled,
 String workDir)

Method Details

evalScript

public Object evalScript(XlrScriptContext xlrScriptContext)
                  throws Exception

Specified by:

evalScript in interface ScriptExecutor

Throws:

Exception

evalScriptPrivileged

protected abstract Object evalScriptPrivileged(ScriptEngine engine,
 String script,
 ScriptContext scriptContext,
 AccessControlContext accessControlContext)
                                        throws Exception

Throws:

Exception

doPrivileged

protected Object doPrivileged(ScriptEngine engine,
 String script,
 ScriptContext scriptContext,
 AccessControlContext accessControlContext)
                       throws Exception

Throws:

Exception

isScriptSandboxEnabled

protected Boolean isScriptSandboxEnabled()

getWorkDir

protected String getWorkDir()

getAccessControlContext

protected AccessControlContext getAccessControlContext()

createMinimalPermissions

protected Permissions createMinimalPermissions()

addJavaPrimitivesPermissions

protected void addJavaPrimitivesPermissions(Permissions minimalPermissions)

addInternalAccessPermissions

protected void addInternalAccessPermissions(Permissions minimalPermissions)

addJythonLibrariesReadPermissions

protected void addJythonLibrariesReadPermissions(Permissions minimalPermissions)

addGroovyLibrariesReadPermissions

protected void addGroovyLibrariesReadPermissions(Permissions minimalPermissions)

addJsonModule

protected void addJsonModule(Permissions permissions)

addCiUtilsPermissions

protected void addCiUtilsPermissions(Permissions permissions)

addJsonSmartLibraryPermissions

protected void addJsonSmartLibraryPermissions(Permissions minimalPermissions)

addJavaHomeSecurityLibPermissions

protected void addJavaHomeSecurityLibPermissions(Permissions minimalPermissions)

addReadPermissionOnJar

protected void addReadPermissionOnJar(List<String> jarNames,
 Permissions minimalPermissions)

addReadPermissionOnPluginsFolder

protected void addReadPermissionOnPluginsFolder(Permissions minimalPermissions)

resolvePermissionIfNecessary

protected Permission resolvePermissionIfNecessary(Permission permission)

configureSandboxAndGetEngine

protected ScriptEngine configureSandboxAndGetEngine(boolean checkPolicyPermissions)

This method sets threadlocal "sandbox" property that is later used by SandboxAwarePackageManager to restrict packages (class namespaces) that are accessible

reloadScriptEngines

public void reloadScriptEngines()

isRestricted

protected boolean isRestricted(boolean checkPolicyPermissions)