Community articleLocation of Installed extensions (Security Issues)
Added by IBM contributorIBM on July 26, 2013
Rate this article 1 starsRate this article 2 starsRate this article 3 starsRate this article 4 starsRate this article 5 stars

The location in which an extension is installed determines how much access the extension has to the user's system resources (for example, user's system files). The following table summarizes the security features that are set when an extension is installed in a particular location.
Location of Installed extensionSecurity Features
The extension is installed as a JAR or ZIP file in the Extensions folder of the IBM® Forms product that will use the extension.The extension has full access to the user's system resources.
The extension is installed as a JAR or ZIP file in the Forms System Global Extensions folder:
C:\< Windows System
 
\PureEdge\extensions
The extension has full access to the user's system resources.
The extension is installed as a set of .class files in the folder:
< Windows System
 
\PureEdge\java\source.
The extension has full access to the user's system resources.
The extension is packaged as a JAR (or Zip) file and enclosed directly within a form.The extension has access only to the form that encloses it. The extension cannot access other parts of the user's system or cause any damage.
Refer to the following section regarding additional security restrictions for functions enclosed in XFDL forms.