Skip to Main Content
Spotfire Ideas Portal

Custom Query global trust (aka Trust-All for custom queries)

Spotfire uses trust feature to prevent malicious scripts from execution. This includes also SQL scripts defined as custom queries. While this feature increases the security of the solution, trusting the queries is troublesome. 

The IronPython scripts in a DXP file can be trusted while opening the visualization using trust-all button. The custom queries require longer path:
1) open visualization accepting broken tables
2) navigate to the connection definition
3) for each custom query open the query editor (typically requires several clicks) and close it clicking OK (contrary to KB articles validation is not needed).
In a solution where there are several custom queries, the procedure is very long. In the Spark Accelerator we had to use mainly custom queries to workaround some newborn-component problems and to build more sophisticated on-demand queries. Bringing the visualization to the new platform is particularly inconvenient during POCs, because it introduces huge amount of unnecessary work in a product advertised for easy use. 
Please add two features to the product: 
1) a startup switch to disable trust check (can be undocumented; to be used internally in order to speed up demos) 
2) Trust-All feature for queries to be executed at DXP load time BEFORE the data is loaded. 
  • Attach files
      Drop here to upload
    • Guest
      Reply
      |
      Oct 27, 2023

      Coming across the same issue over 5 years later. Any updates?

    • Guest
      Reply
      |
      May 19, 2020

      Thanks for reaching out Wei. This enhacement is still in the backlog. Please reach out to me on tblomber@tibco.com if you would like to have a short call to discuss. Thanks, Thomas

    • Guest
      Reply
      |
      May 19, 2020

      Very much expected behavior by customer for a very long time,especially for desktop users. Is there any progress on this?