To change which parts of the server file system that workflows and the Orchestrator API can access, modify the js-io-rights.conf configuration file. The js-io-rights.conf file is created when a workflow attempts to access the Orchestrator server file system.


  1. Log in to the Orchestrator Appliance Linux console as root.
  2. Navigate to /etc/vco/app-server.
  3. Open the js-io-rights.conf configuration file in a text editor.
  4. Add the necessary lines to the js-io-rights.conf file to allow or deny access to areas of the file system.

    For example, the following line denies the execution rights in the /path_to_folder/noexec directory:

    -x /path_to_folder/noexec

    /path_to_folder/noexec retains execution rights, but /path_to_folder/noexec/bar does not. Both directories remain readable and writable.


You modified the access rights to the file system for workflows and for the Orchestrator API.