Security of the Export Templates
 |
System Administrators must carefully review export Excel Templates before uploading to the System.
|
The Word or Excel Templates contain powerful scripts. System Administrators must carefully review the Excel Templates and their scripts to ensure they don't cause any malfunctions, malicious attacks, or security problems in Codebeamer.
The execution and location of Templates have been revised in Codebeamer 9.4 to enforce the security reviews. From Codebeamer 10.0, the following applies to Templates uploaded:
• Excel Templates uploaded into Document Management will only be usable during the exports if they were uploaded or last modified by a System Administrator.
• Templates from the file system (from one of the subdirectories of the export templates directory) are always available for export, but it is the responsibility of the System Administrators to review their content. This rule is enforced by the fact that only System Administrators can access the file system directories.
• Any user can upload Word Templates, which are available for export.