Skip to Main Content
Spotfire Ideas Portal
Status Future Consideration
Product Spotfire
Categories Data Access
Created by Guest
Created on Mar 28, 2018

Custom Query global trust (aka Trust-All for custom queries)

Spotfire uses trust feature to prevent malicious scripts from execution. This includes also SQL scripts defined as custom queries. While this feature increases the security of the solution, trusting the queries is troublesome. 

The IronPython scripts in a DXP file can be trusted while opening the visualization using trust-all button. The custom queries require longer path:
1) open visualization accepting broken tables
2) navigate to the connection definition
3) for each custom query open the query editor (typically requires several clicks) and close it clicking OK (contrary to KB articles validation is not needed).
In a solution where there are several custom queries, the procedure is very long. In the Spark Accelerator we had to use mainly custom queries to workaround some newborn-component problems and to build more sophisticated on-demand queries. Bringing the visualization to the new platform is particularly inconvenient during POCs, because it introduces huge amount of unnecessary work in a product advertised for easy use. 
Please add two features to the product: 
1) a startup switch to disable trust check (can be undocumented; to be used internally in order to speed up demos) 
2) Trust-All feature for queries to be executed at DXP load time BEFORE the data is loaded. 
  • Attach files
  • Guest
    Reply
    |
    Oct 27, 2023

    Coming across the same issue over 5 years later. Any updates?

  • Guest
    Reply
    |
    May 19, 2020

    Thanks for reaching out Wei. This enhacement is still in the backlog. Please reach out to me on tblomber@tibco.com if you would like to have a short call to discuss. Thanks, Thomas

  • Guest
    Reply
    |
    May 19, 2020

    Very much expected behavior by customer for a very long time,especially for desktop users. Is there any progress on this?