Provide a way to control the visibility of methods and fields in scripts when interoperating directly with Java objects

[821938089]

I want some methods and fields of a Java object to be hidden in the script, but currently its visibility is controlled by a modifier, and once I use the private modifier this will cause my code to not be able to access this method as well.

ps: Using kotlin programming on android.

[p-bakker]

This is a very generic question where the potential answers vary significantly based on the situation at hand, ranging from using the (to be removed) SecurityManager to disabling Java interop to using annotations

Am converting this to a discussion (for now)

Please provide more info

[p-bakker]

See #1353 for some related discussion

[821938089]

Hi, your comment is not very clear to me why this involves SecurityManager.

I just want to control if the methods and fields in the Java object can be accessed in the script.

My situation is basically providing some Java object as a variable for the script to execute and the script can access the methods and fields of this object, but there are some public methods and fields that I don't want the script to have access to.

The annotations you mentioned seem to fit my situation, how do I add annotations to the methods and fields to prevent script access?

[p-bakker]

It starts with how you're using Rhino and exposimg Java stuff in scripting (currently). Without knowing that, is impossible to give detailed answers

[821938089]

I use Rhino in this way (simplified code):

public class MyObject {

  public String method1() {
    return "method1";
  }

  public String method2() {
    return "method2";
  }

  public Object evalJS(String jsStr) {
    try (var cx = Context.enter()) {
      cx.setOptimizationLevel(-1);
      var scope = cx.initStandardObjects();
      scope.put("myObj", scope, Context.javaToJS(this, scope));
      return cx.evaluateString(scope, jsStr, "unknown source", 0, null);
    }
  }

}

public class Main {
  public static void main(String[] args) {
    var obj = new MyObject();

    obj.method1();
    obj.method2();

    obj.evalJS("myObj.method1()");
  }
}

If that's still not clear enough, check out the full code here:
https://github.com/gedoor/legado/blob/master/app/src/main/java/io/legado/app/model/analyzeRule/AnalyzeRule.kt#L741-L760

[p-bakker]

Have a look at https://rhino.github.io/tutorials/embedding_tutorial/#defining-host-objects, think that would get you started

[821938089]

Well, it looks like annotations aren't what I want either.
What I want is to control the visibility of some methods and fields when interoperating directly with Java objects.