Sandboxing gremlin

[Erik Assum]

Looking at the security chapter in the Tinkerpop3 documentation, more specifically about sandboxing.

From reading this (and perusing the source-code) I'm under the impression that sandboxing is only available

while compiling with COMPILE_STATIC or TYPE_CHECKED.

Am I correct in this assumption? 

If not (and I hope not), is there example code somewhere showing how to get a hold of a sandboxed gremlin-groovy script engine?

Thanks, 

Erik.

[Stephen Mallette]

that is true. with TinkerPop sandboxes you have to use one of those two options (the types of objects need to be known for sandboxing to work in this implementation). I'm not sure what kind of example you are looking for beyond what is explained in the documentation, but basicallly you just need to configure your GroovyCompilerGremlinPlugin as shown here:

https://github.com/apache/tinkerpop/blob/3.3.1/gremlin-server/conf/gremlin-server-secure.yaml#L36

All requests you make to Gremlin Server for gremlin-groovy will then be sandboxed.

--
You received this message because you are subscribed to the Google Groups "Gremlin-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gremlin-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gremlin-users/996e67cb-8c56-4d40-a7c5-3228a645bf2a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Erik Assum]

Sorry about being unclear. What I was wondering about was if it were possible to do sandboxing with Compilation.NONE, did anyone know of examples of that.

Since you confirmed that this isn’t possible, naturally the examples do not exist either, and the docs are perfectly adequate.

Thanks for your help!

Erik.