Windchill Security Guidelines
You must adhere to the following Windchill security guidelines:
• Direct access to the Windchill database is not allowed.
• Do not use the java.Runtime.exec (execute operating system) command.
• Do not perform filesystem input/output.
• Implement a direct upload or download by using only the standard Windchill content management APIs. Data sharing to or from allowed integrations must be done through Windchill supported APIs and protocols (that is, REST over HTTP) but not directly through the custom code.
• Do not use any third party library APIs.
• Use only Windchill supported APIs and JDK APIs (restricted).
• Do not make any external endpoints calls. Any connection to integrated external clients must use a Windchill server configuration to ensure secure communication and authorization.
• Do not use proprietary data encryption algorithms.