ScriptPermissionManager.GlobalInstance Property

SECURITY NOTE

Report scripts are not secure. We recommend that you use expression bindings to customize your reports. Only enable scripts if you trust your reports and cannot use expression bindings.

How to implement secure report scripts

Specifies the script security permission level applied to the application.

Namespace: DevExpress.XtraReports.Security

Assembly: DevExpress.XtraReports.v24.1.dll

NuGet Package: DevExpress.Reporting.Core

Declaration

C#

public static ScriptPermissionManager GlobalInstance { get; set; }

VB.NET

Public Shared Property GlobalInstance As ScriptPermissionManager

Property Value

Type	Description
ScriptPermissionManager	A ScriptPermissionManager object.

Remarks

To specify the report script execution mode for the entire application, perform the following steps:

1. Instantiate the ScriptPermissionManager class with the specified mode at application startup.
2. Assign the ScriptPermissionManager instance to the GlobalInstance static property.

The following code snippet disables script execution in a reporting application:

C#

using DevExpress.XtraReports.Security;
using System;
// ...

protected void Application_Start(object sender, EventArgs e) {
    ScriptPermissionManager.GlobalInstance = new ScriptPermissionManager(ExecutionMode.Deny);
}

VB.NET

Imports DevExpress.XtraReports.Security
Imports System
' ...

Sub Application_Start(ByVal sender As Object, ByVal e As EventArgs)
    ScriptPermissionManager.GlobalInstance = New ScriptPermissionManager(ExecutionMode.Deny)
End Sub