[GR-14125] Do not give any permissions to TruffleRubyScriptEngine by default

Author: eregon

src/services/java/org/truffleruby/services/scriptengine/TruffleRubyScriptEngine.java

@@ -39,8 +39,12 @@ public class TruffleRubyScriptEngine extends AbstractScriptEngine
     private final Context polyglot;
 
     TruffleRubyScriptEngine(TruffleRubyScriptEngineFactory factory) {
+        this(factory, false);
+    }
+
+    public TruffleRubyScriptEngine(TruffleRubyScriptEngineFactory factory, boolean allowAllAccess) {
         this.factory = factory;
-        polyglot = Context.newBuilder().allowAllAccess(true).build();
+        this.polyglot = Context.newBuilder("ruby").allowAllAccess(allowAllAccess).build();
     }
 
     @Override

src/test/java/org/truffleruby/JSR223InteropTest.java

@@ -68,9 +68,8 @@ public void testCallingMethods() throws ScriptException, NoSuchMethodException {
 
     @Test
     public void testCreatingObjects() throws ScriptException, NoSuchMethodException {
-        final ScriptEngineManager m = new ScriptEngineManager();
-        try (TruffleRubyScriptEngine scriptEngine = (TruffleRubyScriptEngine) m
-                .getEngineByName(TruffleRuby.LANGUAGE_ID)) {
+        try (TruffleRubyScriptEngine scriptEngine = new TruffleRubyScriptEngine(new TruffleRubyScriptEngineFactory(),
+                true)) {
             final Object time = ((Invocable) scriptEngine).invokeMethod(scriptEngine.eval("Time"), "new", 2021, 3, 18);
             final Object year = ((Invocable) scriptEngine).invokeMethod(time, "year");
             assertEquals(2021, year);