4.1

Accessing the Orchestrator Server File System from JavaScript and Workflows
Orchestrator limits access to the Orchestrator server file system from JavaScript and Workflows to specific
directories.
Javascript functions and workflows only have read, write, and execute permission in the permanent directory
c:\orchestrator.
The Orchestrator administrator can modify the folders to which JavaScript functions and workflows have read,
write, and execute access by setting a system property. See the VMware vCenter Orchestrator Administration
Guide for information about setting system properties.
JavaScript functions and workflows also have read, write, and execute permission in the server system default
temporary I/O folder. Writing to the default temporary I/O folder is the only portable, guaranteed, and
configuration-independent means of accessing the file system with full permissions. However, files that you
write to the temporary I/O folder are lost when you reboot the server.
You obtain the default temporary I/O folder by calling the System.getTempDirectory method in JavaScript
functions.
Access the Server File System Using the System.getTempDirectory Method
As an alternative to writing to the folders on the Orchestrator server system in which the administrator has
set the appropriate permissions, you can write to the default temporary I/O folder.
Orchestrator has full read, write, and execute rights in the default temporary I/O folder by default. You obtain
the default temporary I/O folder by using the System.getTempDirectory method in JavaScript functions
Procedure
u
Include the following code line in JavaScript functions to access the java.io.temp-dir folder.
var tempDir = System.getTempDirectory()
Accessing Java Classes from JavaScript
By default, Orchestrator restricts JavaScript access to a limited set of Java classes. If you require JavaScript
access to a wider range of Java classes, you must set an Orchestrator system property to allow this access.
By default, the Orchestrator JavaScript engine can access only the classes in the java.util.* package.
The Orchestrator administrator can allow access to other Java classes from JavaScript functions by setting a
system property. See the VMware vCenter Orchestrator Administration Guide for information about setting system
properties.
Accessing Operating System Commands from JavaScript
The Orchestrator API provides a scripting class, Command, that runs commands in the Orchestrator server host
operating system. To prevent unauthorized access to the Orchestrator server host, by default, Orchestrator
applications do not have permission to run the Command class.
The Orchestrator administrator can allow access to the Command scripting class by setting the
com.vmware.js.allow-local-process=true system property.
For information about setting system properties, see the VMware vCenter Orchestrator Administration Guide.
vCenter Orchestrator Developer's Guide
118 VMware, Inc.