Re: [xwiki-users] viewer=code

Blocking users from copying a script is tricky business. To start with, an exception will cause the content to be dumped in the error message. You might try this: create a page (I will call it Main.banned, but you can call it what you like.) This will contain your secret groovy script. put this in it public class MySecretClass{ public String go(){ //your code goes here, it can only output things through //the return statement, println and errors will not be shown. String out = "hello world!";//my test code :) return out; } } NOTE: there are no <% or {{groovy}} marks Set the permissions of this page so that only you are allowed to view it. create another page (which users are allowed to view.) in this page put: {{velocity}} #set($myclass = $xwiki.parseGroovyFromPage("Main.banned")) $myclass.go() {{/velocity}} now unregistered users and users without permission can view the page with the velocity code (which executes the groovy page), but not view the page with the groovy code (with viewer=code or otherwise.) In the event of an exception in your groovy code, the user will see a velocity exception, and the exact error (eg StringIndexOutOfBoundsException -1) will be shown, but not the groovy code. I have tested this and it works. A user without any special permissions can copy the velocity code and run it themselves, but I can't see any way for them to read the groovy code. Hope this helps, Caleb James DeLisle Thomas Mortagne wrote: