This is an automated email from the ASF dual-hosted git repository.
pvillard pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi.git
The following commit(s) were added to refs/heads/main by this push:
new 72fab7dde74 NIFI-15800 Added Execute Code Permission to
TinkerpopClientService (#11108)
72fab7dde74 is described below
commit 72fab7dde74edfd1063b57e87b0334340c1fbe93
Author: David Handermann <[email protected]>
AuthorDate: Mon Apr 6 11:19:44 2026 -0500
NIFI-15800 Added Execute Code Permission to TinkerpopClientService (#11108)
---
.../java/org/apache/nifi/graph/TinkerpopClientService.java | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git
a/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java
b/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java
index 6a7ac0b85fd..9eb86f0c31d 100644
---
a/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java
+++
b/nifi-extension-bundles/nifi-graph-bundle/nifi-other-graph-services/src/main/java/org/apache/nifi/graph/TinkerpopClientService.java
@@ -27,12 +27,15 @@ import io.netty.handler.ssl.IdentityCipherSuiteFilter;
import io.netty.handler.ssl.JdkSslContext;
import org.apache.commons.codec.digest.DigestUtils;
import org.apache.nifi.annotation.behavior.RequiresInstanceClassLoading;
+import org.apache.nifi.annotation.behavior.Restricted;
+import org.apache.nifi.annotation.behavior.Restriction;
import org.apache.nifi.annotation.documentation.CapabilityDescription;
import org.apache.nifi.annotation.documentation.Tags;
import org.apache.nifi.annotation.lifecycle.OnDisabled;
import org.apache.nifi.annotation.lifecycle.OnEnabled;
import org.apache.nifi.components.AllowableValue;
import org.apache.nifi.components.PropertyDescriptor;
+import org.apache.nifi.components.RequiredPermission;
import org.apache.nifi.components.ValidationContext;
import org.apache.nifi.components.ValidationResult;
import org.apache.nifi.components.Validator;
@@ -72,6 +75,14 @@ import java.util.concurrent.ConcurrentHashMap;
"Bytecode submission allows much more flexibility. When providing a
jar, custom serializers can be used and pre-compiled graph logic can be
utilized by groovy scripts" +
"provided by processors such as the ExecuteGraphQueryRecord.")
@RequiresInstanceClassLoading
+@Restricted(
+ restrictions = {
+ @Restriction(
+ requiredPermission = RequiredPermission.EXECUTE_CODE,
+ explanation = "Enables configuration of scripted
queries"
+ )
+ }
+)
public class TinkerpopClientService extends AbstractControllerService
implements GraphClientService {
public static final String NOT_SUPPORTED = "NOT_SUPPORTED";
private static final AllowableValue BYTECODE_SUBMISSION = new
AllowableValue("bytecode-submission", "ByteCode Submission",
