evasques ac4a1643e1 PRODSEC-4422 - Scripts not in Data Dictionary can be executed by action (#596) ...

* Added validation to the ScriptActionExecuter class to enforce the existing constraints on parameter script-ref (Repo has the constraint to only allow scripts in Data Dictionary / Scripts and AGS has the constraint to only allow scripts in Data Dictionary / Records Management / Records Management Scripts") by validating if the given scriptRef is in the allowed valued of the constraint set on that param
* Added a new unit test for AGS to make sure that rmscript action still works as expected when the script is in the correct folder and fails when not
* Added new case in ActionServiceImpl2Test#testExecuteScript to assert that the transaction fails when we execute the action with an invalid script
* Moved test testActionResult from ActionServiceImplTest to class ActionServiceImpl2Test - Before it ran with a script not in Data Dictionary so with the added validation it started to fail. I moved the unit test do avoid duplicating the code to create the script in the correct location.

2021-07-15 17:45:22 +01:00

..

java/org/alfresco/module/org_alfresco_module_rm/test

PRODSEC-4422 - Scripts not in Data Dictionary can be executed by action (#596)

2021-07-15 17:45:22 +01:00

resources

Move governance-services code to amps/ags

2021-05-05 19:41:33 +01:00