enhancement
It should be possible to hide the "Select Server Script" button in the Script Recorder GUI via application configuration. The reason for this requirement is so-called “hacker tests” conducted at the customer’s site, which revealed that this functionality allows users to browse through the entire contents of the webapp directory.
Implementation
{{{#!xml <application xmlns:config="http://www.top-logic.com/ns/config/6.0">
<configs>
<config config:interface="com.top_logic.layout.scripting.template.gui.ScriptingGuiConfig"
show-server-script-selector="false"
/>
</configs>
</application> }}}
Test
- Set the configuration to "false".
- Verify that the "Select Server Script" button is not displayed in the ScriptingGUI.
- Verify that the Save button is not displayed in the ScriptingGui.
- Set the configuration to "true".
- Verify that both buttons are displayed.
Screenshots