[
https://issues.apache.org/jira/browse/OFBIZ-5394?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13828339#comment-13828339 ]
Adrian Crum commented on OFBIZ-5394:
------------------------------------
Please re-read my previous comment:
"Features like this that allow a user to modify a server's files end up being used as exploits."
Having Web Tools permissions doesn't make any difference. Consider our demo instances.
> Use Groovy AntBuilder to launch ant tasks through a web browser.
> ----------------------------------------------------------------
>
> Key: OFBIZ-5394
> URL:
https://issues.apache.org/jira/browse/OFBIZ-5394> Project: OFBiz
> Issue Type: Improvement
> Components: framework
> Affects Versions: SVN trunk, Release Branch 12.04, Release Branch 13.07
> Reporter: Gavin Mabie
> Labels: features, patch
> Fix For: SVN trunk
>
> Attachments: ofbiz-webtools-component.patch
>
>
> Some of the ant tasks in build.xml can be encapsulated in a groovy script using Groovy AntBuilder. This provides the ability to use form widgets to pass parameters to ant. For less technical users this can be a major help as they do not have to go through a console but can instead launch ant tasks through a user-friendly webinterface. To start with I have enscapsulated the "create-component" task in a groovy script - CreateComponent.groovy. The best place for this enhancement seems to be the Webtools app. To this end I have created a new menu item from the webtools app and named it Component Management. I also added "ComponentScreens.xml and ComponentForms.xml".
--
This message was sent by Atlassian JIRA
(v6.1#6144)
Locked
