@@ -24,15 +24,14 @@ grant {
24
24
permission java.lang.RuntimePermission "getClassLoader";
25
25
// needed by groovy engine
26
26
permission java.lang.RuntimePermission "accessClassInPackage.sun.reflect";
27
- permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
28
27
// needed by GroovyScriptEngineService to close its classloader (why?)
29
28
permission java.lang.RuntimePermission "closeClassLoader";
30
29
// Allow executing groovy scripts with codesource of /untrusted
31
30
permission groovy.security.GroovyCodeSourcePermission "/untrusted";
32
31
33
32
// Standard set of classes
34
33
permission org.elasticsearch.script.ClassPermission "<<STANDARD>>";
35
- // groovy runtime
34
+ // groovy runtime (TODO: clean these up if possible)
36
35
permission org.elasticsearch.script.ClassPermission "groovy.grape.GrabAnnotationTransformation";
37
36
permission org.elasticsearch.script.ClassPermission "groovy.json.JsonOutput";
38
37
permission org.elasticsearch.script.ClassPermission "groovy.lang.Binding";
@@ -49,9 +48,11 @@ grant {
49
48
permission org.elasticsearch.script.ClassPermission "org.codehaus.groovy.runtime.typehandling.DefaultTypeTransformation";
50
49
permission org.elasticsearch.script.ClassPermission "org.codehaus.groovy.vmplugin.v7.IndyInterface";
51
50
permission org.elasticsearch.script.ClassPermission "sun.reflect.ConstructorAccessorImpl";
51
+ permission org.elasticsearch.script.ClassPermission "sun.reflect.MethodAccessorImpl";
52
52
53
53
permission org.elasticsearch.script.ClassPermission "groovy.lang.Closure";
54
54
permission org.elasticsearch.script.ClassPermission "org.codehaus.groovy.runtime.GeneratedClosure";
55
55
permission org.elasticsearch.script.ClassPermission "groovy.lang.MetaClass";
56
56
permission org.elasticsearch.script.ClassPermission "groovy.lang.Range";
57
+ permission org.elasticsearch.script.ClassPermission "groovy.lang.Reference";
57
58
};
0 commit comments