<p>I try to use Birt as our reporting engine for a enterprise software. </p>
<p>One of our requirement is the customer can drop their report design file (.rptdesign) to generate the report without change our code. Birt can do it with JavaScript if we can provide data set in java.</p>
<p>My question is</p>
<p>According to my understanding the JavaScript code in Birt can access any Jave code in our software by</p>
<p> </p>
<p><span style="font-family:'courier new';"><span style="font-size:10pt;">importPackage( Packages.com.company.AppLogic );</span></span></p>
<p><span style="font-size:10pt;font-family:'courier new';">obj = new MyClass( );</span></p>
<p><span style="font-family:'courier new';"><span style="font-size:10pt;">result = obj.calculate( row.balance, row.dueDate );</span></span></p>
<p> </p>
<p><span style="font-family:'courier new';"><span style="font-size:10pt;">It raises a security question</span></span></p>
<p>Customer code can mess up whole software if they make some mistake or do it in purpose.</p>
<p> </p>
<p>Do you have any way to protect it or only export some specific class to JavaScript?</p>
<p>What is the API to disable JavaScript?</p>
<p> </p>
<p>Any help will be appreciated.</p>
<p> </p>
<p>Thanks in advance</p>
