By default, Orchestrator restricts JavaScript access to a limited set of Java classes. If you require JavaScript access to a wider range of Java classes, you must set an Orchestrator system property to allow this access.

About this task

Allowing the JavaScript engine full access to the Java virtual machine (JVM) presents potential security issues. Malformed or malicious scripts might have access to all of the system components to which the user who runs the Orchestrator server has access. Consequently, by default the Orchestrator JavaScript engine can access only the classes in the java.util.* package.

If you require JavaScript access to classes outside of the java.util.* package, you can list in a configuration file the Java packages to which to allow JavaScript access. You then set the com.vmware.scripting.rhino-class-shutter-file system property to point to this file.


  1. Create a text configuration file to store the list of Java packages to which to allow JavaScript access.

    For example, to allow JavaScript access to all the classes in the package and to the java.lang.Object class, you add the following content to the file.*
  2. Save the configuration file with an appropriate name and in an appropriate place.
  3. Log in to Control Center as root.
  4. Click System Properties.
  5. Click the Add icon ().
  6. In the Key text box enter com.vmware.scripting.rhino-class-shutter-file.
  7. In the Value text box enter the path to your configuration file.
  8. In the Description text box enter a description for the system property.
  9. Click Add.
  10. Click Save changes from the pop-up menu.

    A message indicates that you have saved successfully.

  11. Restart the Orchestrator server.


The JavaScript engine has access to the Java classes that you specified.