Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Product Spotfire
Categories Library
Created by Guest
Created on Jun 23, 2016

Finer grained security in Spotfire Client

Thanks a lot for given people the operunity to share their thoughs!

In a highly secured environment it would be very helpful if more security options would be available e. g. enable/disable export – printing - file save – or others

At the moment many of those features are already implemented via the licenses, but according to the documentation: “Licenses control what function are available in the user interface in the Spotfire client. They do not control what permissions you have or what you are allowed to do.”

The effect of this is that exporting can be switched of via the licenses but it can easily worked around to still be able to download files from the library via a web link.

If you would leave nothing to be desired you would use the licenses to control security as you already have a very good basis for that as LDAP an authentication and authorization framework can be used to enforce license to logins. (…dreams can come true ;-)).

 

  • Attach files
  • Guest
    Reply
    |
    Feb 23, 2017

    Some of this features can already be controlled on the Web Player config although it's a simple on and off configuration option, you can't enable these by permissions. You can also do it from the Java Script API so potentially you could integrate this with your own portal or custom web app and AD groups to enable/disable these features based on user access:

    https://luminite.wordpress.com/2016/03/23/tibco-spotfire-7-5-javascript-api-101/

    Extract from Spotfire.Dxp.Worker.Web.config:


          <analysis showToolTip="true" showClose="true" showToolBar="true" showAnalysisInformationTool="true" showExportFile="true" showExportVisualization="true" showUndoRedo="true" showDodPanel="" showFilterPanel="" showPageNavigation="true" showStatusBar="true" showPrint="true" allowRelativeLinks="false" showShareWithTwitter="true" showCollaboration="true" />

4 MERGED

Permissions and overlapping license rights creates access exploit

Merged
We have discovered with our users that our current configuration and understanding of Spotfire License and Permission may not be sufficient for access control. Please see the following scenario, and confirm if this is true. If it is, we want to kn...
almost 8 years ago in Spotfire / Library 1 Future Consideration