Setting Javascript Options; High Privilege Javascript Defined - Adobe 22002484 Manual

Acrobat Family of Products
Security Feature User Guide
Whether dynamic content executes in certified documents based on the Trusted Document or Other
Document settings depends on two items under your control:
You can configure a certified document to use the trusted document settings on a per-certificate basis

or by using trust anchors. If a signer's certificate chains up to another certificate (a trust anchor) that
allows multimedia, then multimedia will run in that certified document. For example, some enterprises
may issue a MyCompany certificate that allows dynamic content. If all employee certificates use
MyCompany as a trust anchor, then they can send and receive certified documents within the company
that could contain working multimedia.
If the certificate trust settings allow dynamic content, the Multimedia Trust Manager's Trusted

documents settings are used.
If the certificate trust settings do not allow dynamic content, the Trust Manager's Other

Documents settings are used, UNLESS the document has already been added to the trusted
documents list.
You can configure a certified document to always use the trusted document settings regardless of

certificate trust levels by adding it to the Trusted Documents list.
For details about setting certificate trust, see
Preventing Multimedia Playback in Certified Documents
To prevent dynamic content from playing in any certified document do one of the following:
Never allow multimedia: Uncheck Allow multimedia operations in the Trust Options panel for both

trusted and untrusted documents as described in
99.
Never allow multimedia for untrusted documents: Never trust any certificate for dynamic content and

clear your trusted document list. Then configure your Other Document multimedia settings to Never
or Prompt.
Note:

8.3 Setting JavaScript Options

8.3.1 High Privilege JavaScript Defined

High privilege JavaScripts are Acrobat methods with security restrictions. These are marked by an "S" in
the third column of the quick bar in the JavaScript for Acrobat API Reference. These methods can be
executed only in a privileged context, which includes the console, batch, menu, and application
initialization events. All other events (for example, page open and mouse-up events) are considered
non-privileged.
The description of each security-restricted method indicates the events during which the method can be
executed. Beginning with Acrobat 6.0, security-restricted methods can execute in a non-privileged context
if the document is certified and the certifier's certificate is trusted for executing embedded JavaScript.
your system. Participants in certification workflows should consider the source of the document
and the security of the workflow before enabling dynamic content.
There is no way to guarantee that multimedia won't play based on the trusted document list and
certificate trust level alone. Application preferences always override these features.
"Setting Certificate Trust" on page
"Configuring Multimedia Trust Preferences" on page
External Content and Document Security
Setting JavaScript Options
37.
101