Alfresco Exam APSCA Topic 2 Question 40 Discussion

Actual exam question for Alfresco's APSCA exam

Question #: 40
Topic #: 2

For security reasons you do not want to allow any processes to be designed with script tasks as it could be used maliciously, is there a way to prevent this?

ANo, this is a base task in the App Designer process editor and it cannot be disabled, you will need to restrict who has access to App Designer to create processes.

BThe capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.

CA validator property can be set to false to disable script tasks in the activiti-app.properties file.

DIf you synchronize in users from external, you can modify configuration in the activiti-ldap.properties to prevent users from using script tasks 'ldap.synchronization.scripttask=false'.

Show Suggested Answer

Suggested Answer: C

by Rolande at Mar 24, 2023, 08:25 AM

Limited Time Offer

25%

Off

Get Premium APSCA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

William

1 months ago

Hmm, I wonder if I can still sneak in a few script tasks without anyone noticing. I mean, what's the worst that could happen? Oh, wait, it's a security risk. Nevermind, I'll stick to the safe options.

upvoted 0 times

Marvel

3 days ago

C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.

upvoted 0 times

...

Mike

12 days ago

B) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.

upvoted 0 times

...

Denise

17 days ago

A) No, this is a base task in the App Designer process editor and it cannot be disabled, you will need to restrict who has access to App Designer to create processes.

upvoted 0 times

...

Kayleigh

2 months ago

Ugh, why do we even have script tasks in the first place? Sounds like a security nightmare waiting to happen. I say we just get rid of the whole process editor and call it a day. Problem solved!

upvoted 0 times

Odette

4 days ago

C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.

upvoted 0 times

...

Micaela

4 days ago

B) I agree, script tasks can be risky. But there are ways to control who can use them.

upvoted 0 times

...

Shoshana

16 days ago

A) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.

upvoted 0 times

...

Terrilyn

2 months ago

D sounds like a good option if you're syncing users from an external source. Modifying the LDAP config to prevent script tasks is a nice touch. Keeps things nice and secure without too much hassle.

upvoted 0 times

Margot

1 months ago

Modifying the LDAP config to prevent script tasks is a nice touch. Keeps things nice and secure without too much hassle.

upvoted 0 times

...

Claudio

1 months ago

D sounds like a good option if you're syncing users from an external source.

upvoted 0 times

...

Norah

2 months ago

The correct answer is B. Removing the 'script task allowed' capability from user groups is the way to go. Gotta keep that process editor on lockdown, you know?

upvoted 0 times

...

Xuan

2 months ago

But what if we need script tasks for some processes? Would restricting access to App Designer be too limiting?

upvoted 0 times

...

Lajuana

2 months ago

Hmm, I'm not sure if I should be concerned about this security risk. I mean, who would even want to use script tasks for malicious purposes? It's not like we're running a top-secret government agency or anything.

upvoted 0 times

Vanna

17 days ago

D) If you synchronize in users from external, you can modify configuration in the activiti-ldap.properties to prevent users from using script tasks 'ldap.synchronization.scripttask=false'.

upvoted 0 times

...

Latia

18 days ago

C) A validator property can be set to false to disable script tasks in the activiti-app.properties file.

upvoted 0 times

...

Carey

19 days ago

B) The capability 'script task allowed' can be removed from the capability group for users you want to prevent from using script tasks.

upvoted 0 times

...

Brent

21 days ago

A) No, this is a base task in the App Designer process editor and it cannot be disabled, you will need to restrict who has access to App Designer to create processes.

upvoted 0 times

...

Natalie

2 months ago

I agree with Colette, removing the capability for certain users seems like a secure approach.

upvoted 0 times

...

Colette

3 months ago

I think option B sounds like a good solution to prevent script tasks.

upvoted 0 times

...