aio-policy.conf

一个工作流设计及定义的系统,可以直接与数据库结合进行系统工作流程的定义及应用.

//
// the engine policy
//

grant codebase "file:./jars/openwfe-applic.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/openwfe-engine.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/openwfe-worklist.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/openwfe-reactor.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/log4j-1.2.5.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/jdom.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/crimson.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/jython-2.1.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/jyLib.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/activation.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/mail.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/velocity-dep-1.4.jar"
{
    permission java.security.AllPermission;
};

grant codebase "file:./jars/openwfe-engine-actions.jar"
{
    permission java.util.PropertyPermission 
	"user.dir", "read";
    permission java.util.PropertyPermission 
	"openwfe.xml.encoding", "read";

    permission java.io.FilePermission 
	"work/engine/pool", "read, write, delete";
    permission java.io.FilePermission 
	"work/engine/pool/-", "read, write, delete";

    permission java.io.FilePermission 
	"etc/aio", "read";
    permission java.io.FilePermission 
	"etc/aio/-", "read";

    permission java.io.FilePermission 
	"etc/worklist", "read";
    permission java.io.FilePermission 
	"etc/worklist/-", "read";

    permission java.io.FilePermission 
	"work/worklist/store/-", "read, write, delete";

    permission java.io.FilePermission 
	"etc/engine", "read";
    permission java.io.FilePermission 
	"etc/engine/-", "read";

    permission java.net.SocketPermission 
	"127.0.0.1", "connect, resolve";
};

grant codebase "file:jars/openwfe-worklist-actions.jar"
{
    permission java.util.PropertyPermission 
	"user.dir", "read";
    permission java.util.PropertyPermission 
	"openwfe.xml.encoding", "read";

    permission java.io.FilePermission 
	"work/engine/pool", "read, write, delete";
    permission java.io.FilePermission 
	"work/engine/pool/-", "read, write, delete";

    permission java.io.FilePermission 
	"etc/aio", "read";
    permission java.io.FilePermission 
	"etc/aio/-", "read";

    permission java.io.FilePermission 
	"etc/worklist", "read";
    permission java.io.FilePermission 
	"etc/worklist/-", "read";

    permission java.io.FilePermission 
	"work/worklist/store/-", "read, write, delete";

    permission java.io.FilePermission 
	"etc/engine", "read";
    permission java.io.FilePermission 
	"etc/engine/-", "read";

    permission java.net.SocketPermission 
	"127.0.0.1", "connect, resolve";
};

grant codebase "file:jars/openwfe-uman-actions.jar"
{
    permission java.util.PropertyPermission 
	"user.dir", "read";
    permission java.util.PropertyPermission 
	"openwfe.xml.encoding", "read";

    permission java.io.FilePermission 
	"etc/aio/passwd.xml", "read, write";

    permission java.net.SocketPermission 
	"127.0.0.1", "connect, resolve";
    permission java.net.SocketPermission 
	"[0:0:0:0:0:0:0:1]", "connect, resolve";
};


//
// for our db-poya-engine.sh script

grant codebase "file:./jars/openwfe-xdbc.jar"
{
    permission java.security.AllPermission;
};
grant codebase "file:./jars/mysql-connector-java-3.0.5-gamma-bin.jar"
{
    permission java.security.AllPermission;
};
grant codebase "file:./jars/pg73jdbc3.jar"
{
    permission java.security.AllPermission;
};
grant codebase "file:./jars/db2jcc.jar"
{
    permission java.security.AllPermission;
};