Location of Installed extensions (Security Issues)

The location in which an extension is installed determines how much access the extension has to the user's system resources (for example, user's system files). The following table summarizes the security features that are set when an extension is installed in a particular location.

Location of Installed extension Security Features
The extension is installed as a JAR or ZIP file in the Extensions folder of the IBM® Forms product that will use the extension. The extension has full access to the user's system resources.
The extension is installed as a JAR or ZIP file in the Forms System Global Extensions folder:

C:\<Windows System>\PureEdge\extensions

The extension has full access to the user's system resources.
The extension is installed as a set of .class files in the folder:

<Windows System>\PureEdge\java\source.

The extension has full access to the user's system resources.
The extension is packaged as a JAR (or Zip) file and enclosed directly within a form. The extension has access only to the form that encloses it. The extension cannot access other parts of the user's system or cause any damage.

Refer to the following section regarding additional security restrictions for functions enclosed in XFDL forms.