topic Re: Run shell commands from scripts in Alfresco Archive

Run shell commands from scripts

janco — Fri, 14 Mar 2008 13:26:28 GMT

I was searching the alfresco wiki and forums, but didnt find anything about this.Is it possible to run shell commands from scripts? I mean from the scripts that are in "Company Home > Data Dictionary > Scripts". I know its a javascript but as I am looking on the examples there looks like its a

Re: Run shell commands from scripts

jbarmash — Fri, 14 Mar 2008 14:29:21 GMT

I would guess not (with about 60% confidence level).

We use Rhino as an engine for server-side JavaScript. The way it works is that you need explicitly expose certain Java objects as Java. I don't believe low-level functionality of Java is exposed.

Even if it is possible, then it should not be, since that would introduce a security problem - people could then upload a script that starts interacting with the server file system - not a good idea. I thought i saw some checkins recently around improving security of these scripts.

On the other hand, the scripts that are deployed on a file system don't have the same security problem, but I am not sure if you could write to the filesystem from there.

Re: Run shell commands from scripts

pmonks — Fri, 14 Mar 2008 20:49:45 GMT

You're spot on Jean. Scripts stored in the repository run in a sandbox that prevents the code from doing anything dangerous (including things like calling Java APIs and, by extension, invoking OS commands / scripts) - this is to prevent users from uploading and running scripts that inadvertently or maliciously damage the system (or worse!).

That said, Alfresco v2.1.3 and above include a change that enables scripts stored wholely within the classpath to access native Java APIs (which allows all sorts of logic, including invocation of OS level commands / scripts). The reasoning here is that if a developer has sufficient privileges to manipulate the Alfresco classpath, there's not a lot Alfresco can do to prevent inadvertent / malicious damage to the system by that person (since they have direct filesystem access to the server).

Re: Run shell commands from scripts

mir4ge — Sun, 16 Mar 2008 02:18:39 GMT

Don't if the following can be useful to you… but…

I think that you could use the Java Runtime class ( http://java.sun.com/j2se/1.3/docs/api/java/lang/Runtime.html )
as a wrapper, passing your shell commands through strings…

You could refer to the source code of the RuntimeExecutableContentTransformer class ( http://wiki.alfresco.com/wiki/Content_Transformations )
which is embedded in Alfresco…